recon-pools
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands (curl, grep, tee) to perform reconnaissance on external domains. These commands are used to identify directory listings, search for sensitive keywords in debug logs, and test for CORS misconfigurations.
- [SAFE]: The automated scanner alert regarding remote code execution is identified as a false positive. The pattern 'curl ... | python3 -c' uses an inline Python script provided within the skill to parse JSON data from crt.sh rather than executing arbitrary code from a remote source.
- [SAFE]: The credential search patterns (e.g., searching for DB_PASSWORD in debug logs) are designed to identify vulnerabilities in the external target site being audited, which is consistent with the skill's stated purpose as a reconnaissance tool.
Audit Metadata