recon-dentists
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard command-line utilities including
curl,grep,jq, andsortto perform domain discovery and software reconnaissance on target environments. - [EXTERNAL_DOWNLOADS]: The skill fetches data from external sources such as the certificate transparency log search
crt.shand various endpoints on targeted web servers (e.g., WordPress REST API and configuration backup paths). This behavior is characteristic of the skill's stated purpose for security auditing and reconnaissance. - [REMOTE_CODE_EXECUTION]: Although an automated scanner flagged a piped command to
python3, analysis confirms this is a false positive. The commandcurl -sk "https://$TARGET/wp-json/wp/v2/users" | python3 -m json.tooluses the safe, standard library modulejson.toolto format the received output and does not execute external content as code.
Audit Metadata