hunt-oauth

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to retrieve OpenID configuration files from target servers using the curl command. This is a standard and expected reconnaissance step during an OAuth security audit.
  • [COMMAND_EXECUTION]: The skill provides several shell commands for security research and reconnaissance. These include the use of apktool for mobile application analysis, grep for searching patterns in source code or response data, and curl for interacting with web endpoints. A command flagged by scanners (curl ... | python3 -m json.tool) was evaluated and found to be a benign use of Python's built-in JSON formatting module to pretty-print configuration data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 05:32 AM
Security Audit — agent-trust-hub — hunt-oauth