owasp-top-10
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a static documentation resource for web security best practices and does not contain executable code or dangerous instructions.- [COMMAND_EXECUTION]: Documentation includes examples of dangerous commands such as "rm -rf /" in "references/a03-injection.md" to illustrate OS command injection vulnerabilities. These are informational examples labeled as "Wrong" and are not intended for execution.- [DATA_EXFILTRATION]: The documentation references sensitive paths such as "/etc/passwd" in "references/a01-broken-access-control.md" within educational examples of path traversal vulnerabilities. This content is intended for risk identification.- [CREDENTIALS_UNSAFE]: Placeholder hardcoded secrets are present in "references/a02-cryptographic-failures.md" to demonstrate insecure secret management practices. These are educational examples and do not involve active credentials.
Audit Metadata