hunt-oauth
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to retrieve OpenID configuration files from target servers using the
curlcommand. This is a standard and expected reconnaissance step during an OAuth security audit. - [COMMAND_EXECUTION]: The skill provides several shell commands for security research and reconnaissance. These include the use of
apktoolfor mobile application analysis,grepfor searching patterns in source code or response data, andcurlfor interacting with web endpoints. A command flagged by scanners (curl ... | python3 -m json.tool) was evaluated and found to be a benign use of Python's built-in JSON formatting module to pretty-print configuration data.
Audit Metadata