httpx-probe
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the execution of the
httpxbinary along with other security tools such assubfinder,naabu,nuclei, andkatanato perform web probing and vulnerability scanning tasks. - [INDIRECT_PROMPT_INJECTION]: The tool's primary function involves fetching and processing data from external web servers, including headers, body content, and tech stack fingerprints. This creates an ingestion surface where content from scanned targets is brought into the agent's context.
- Ingestion points: HTTP responses, titles, and headers from external target URLs processed by the skill (SKILL.md).
- Boundary markers: No specific delimiters are defined in the command-line examples for segregating external data from instructions.
- Capability inventory: The skill facilitates network probing, technology identification, data extraction via regular expressions, and writing results to local files (e.g., results.json).
- Sanitization: Processing relies on the
httpxutility's internal parsing and the agent's interpretation of the tool's standard output. - [EXTERNAL_DOWNLOADS]: The skill includes a reference to the official ProjectDiscovery GitHub repository for the
httpxtool documentation and source code.
Audit Metadata