hunt-cache-poison
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational material and testing procedures for web cache poisoning. No malicious patterns, such as obfuscation, persistence, or unauthorized credential access, were detected.- [INDIRECT_PROMPT_INJECTION]: The skill involves analyzing potentially untrusted data from external HTTP responses.
- Ingestion points: HTTP response headers (e.g., X-Cache, Age) and bodies fetched from user-defined targets via curl.
- Boundary markers: No specific delimiters are used to wrap target output in the provided examples.
- Capability inventory: The skill uses curl to make network requests and grep for local analysis.
- Sanitization: The methodology assumes the researcher is manually inspecting the output. This surface is inherent to the skill's purpose as a security audit tool and is considered safe.- [COMMAND_EXECUTION]: The skill provides curl command templates for interacting with external web endpoints. These commands are intended for vulnerability research and do not target sensitive local files or system configurations.
Audit Metadata