hunt-metrics-exposure
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes common command-line tools including curl, grep, and python3 to interact with external targets and process extracted data. This behavior is transparent and aligned with its stated redteaming functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external observability endpoints, which creates a potential surface for indirect prompt injection.
- Ingestion points: Remote HTTP response bodies retrieved via curl in Phases 1, 2, and 3.
- Boundary markers: No explicit delimiters or boundary markers are used when processing the external data.
- Capability inventory: The skill uses curl (network operations), grep/wc (text extraction), and python3 (JSON formatting).
- Sanitization: There is no evidence of content sanitization or validation before the data is processed by the scripts.
Audit Metadata