recon-breweries
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell command templates using
curl,grep, andjqintended for execution against a user-specified$TARGETvariable to perform network reconnaissance. - [EXTERNAL_DOWNLOADS]: The skill performs network requests via
curlto arbitrary external targets to retrieve headers, HTML content, and JSON data for analysis. - [DATA_EXFILTRATION]: The skill provides instructions for discovering and retrieving potentially sensitive data from target systems, such as WooCommerce product/order/customer JSON endpoints and Untappd API keys embedded in HTML.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to the processing of untrusted external data. * Ingestion points: The
$TARGETvariable in shell commands across theStep-by-Stepsection ofSKILL.md. * Boundary markers: Absent. * Capability inventory: Shell execution capabilities usingcurl,grep, andjqdocumented inSKILL.md. * Sanitization: Absent; the skill does not include logic to sanitize or escape the$TARGETinput before interpolation into shell commands.
Audit Metadata