api-noauth-hunt
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with API endpoints,python3for JSON processing, andjqfor parsing output. These are standard tools for API security testing. - [SAFE]: The skill implements significant safety controls, including an explicit environment variable check (
I_HAVE_EXPLICIT_WRITE_AUTHORIZATION) before performing state-changing operations (POST, PATCH, DELETE). It also uses synthetic records and bounded reads to prevent data collection beyond what is necessary for validation.
Audit Metadata