cms-detection

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard reconnaissance commands using well-known tools like httpx, whatweb, and curl. The operations described are consistent with the skill's stated purpose of identifying web technologies.
  • [COMMAND_EXECUTION]: The skill correctly uses shell commands for its intended purpose of technology fingerprinting and version detection. It leverages tools like grep, awk, and jq for processing the output of network requests.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with remote web servers to fetch technology signatures, which is necessary for its function. It also references nuclei, which is a well-known security tool for template-based scanning.
  • [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration or credential theft were identified. The network communication is limited to reconnaissance of targets and does not involve sending local system information or secrets to external servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 04:47 PM
Security Audit — agent-trust-hub — cms-detection