http-smuggling-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download established security research tools from GitHub repositories, specifically
defparam/smugglerandBishopFox/h2csmuggler. - [COMMAND_EXECUTION]: Includes various command-line examples for running vulnerability scanners and executing Python-based network analysis scripts.
- [SAFE]: The provided Python code snippets for detecting smuggling via timing analysis are transparent and use standard libraries (
socket,ssl,h2) for their stated diagnostic purposes. All findings are consistent with the skill's primary purpose as a security auditing tool.
Audit Metadata