hunt-schema-enumeration
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell loops and
curlto perform network-based fuzzing and reconnaissance on API endpoints to identify hidden tables and fields. - [EXTERNAL_DOWNLOADS]: It fetches structured error responses from external target APIs to extract schema hints, which is the intended functionality for this red-teaming tool.
- [COMMAND_EXECUTION]: Employs localized Python execution (
python3 -c) to parse JSON data from standard input, specifically extracting 'hint' fields from API responses. - [COMMAND_EXECUTION]: Accesses the local
/tmp/directory to read wordlists and log fuzzing results during the enumeration process. - [SAFE]: Hardcoded credential strings like
ANON_KEY="eyJ..."are non-functional placeholders or standard public JWT prefixes used in Supabase environments.
Audit Metadata