web-vuln-business-logic
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
curl,python3, andgrepto perform security testing on a user-provided target URL. This behavior is consistent with the skill's stated purpose as a penetration testing tool. - [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill correctly utilizes environment variables (e.g.,
SECSKILL_TOKEN) to handle authentication tokens provided by the user. - [DATA_EXFILTRATION]: No data exfiltration patterns were detected. Network activities are restricted to the target server defined by the user in the
SECSKILL_TARGETvariable. - [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads of packages or remote scripts during execution.
- [REMOTE_CODE_EXECUTION]: No remote code execution or dynamic code evaluation from untrusted sources was identified.
Audit Metadata