xray-scan
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and links to official external repositories for the xray scanning tool and its community POC plugins on GitHub (github.com/chaitin/xray). These references point to established resources from a well-known security vendor.\n- [COMMAND_EXECUTION]: The skill provides numerous templates for executing shell commands using the xray binary to perform tasks such as URL scanning, web crawling, and setting up a passive proxy listener.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external, untrusted web targets, creating a potential vector for indirect prompt injection.\n
- Ingestion points: Target URLs and crawled web content processed by the webscan and basic-crawler commands in SKILL.md.\n
- Boundary markers: None specified in the command patterns or instructions to delimit remote content.\n
- Capability inventory: Execution of shell commands (xray binary) and generation of report files.\n
- Sanitization: No explicit sanitization or filtering logic is provided within the instructions to handle potentially malicious payload responses from target servers.
Audit Metadata