recon-daycare
Fail
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a variety of shell commands, including
curl,grep, andjq, to perform automated triage, CMS detection, and vulnerability scanning against target domains. - [REMOTE_CODE_EXECUTION]: The skill implements a pattern where data fetched from external URLs (including the
crt.shcertificate transparency service and arbitrary target domains) is piped directly into apython3process using the-cflag. This dynamic execution involves processing untrusted network data through inline scripts. - [DATA_EXFILTRATION]: The skill is designed to locate and extract highly sensitive information, specifically targeting the PII of minors (names, ages, contact details), registration records, database credentials (
DB_PASSWORD,DB_USER), and payment gateway keys (pk_live_,pk_test_). It includes automated commands to download discovered PDF, CSV, and XLSX files from target server directories to a local directory.
Recommendations
- HIGH: Downloads and executes remote code from: https://crt.sh/?q=%25.$org&output=json, https://$TARGET/wp-json/ - DO NOT USE without thorough review
Audit Metadata