recon-dentists

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard command-line utilities including curl, grep, jq, and sort to perform domain discovery and software reconnaissance on target environments.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from external sources such as the certificate transparency log search crt.sh and various endpoints on targeted web servers (e.g., WordPress REST API and configuration backup paths). This behavior is characteristic of the skill's stated purpose for security auditing and reconnaissance.
  • [REMOTE_CODE_EXECUTION]: Although an automated scanner flagged a piped command to python3, analysis confirms this is a false positive. The command curl -sk "https://$TARGET/wp-json/wp/v2/users" | python3 -m json.tool uses the safe, standard library module json.tool to format the received output and does not execute external content as code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 05:19 PM
Security Audit — agent-trust-hub — recon-dentists