directory-submissions
Fail
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's data files, specifically
references/directory-list.mdandreferences/submission-tracker-template.csv, include a link tohttps://fitprofessionals.net. This domain is currently blacklisted and identified as malicious by security scanners (URL:Blacklist|URC1A1CADBA41B2847-0200|urlb). - [COMMAND_EXECUTION]: The workflow in
SKILL.md(Step 4: Batch submit) instructs the agent to verify backlinks by executing a shell command:curl -sIL https://directory.com/your-listing | grep -i rel=. Automating network requests against a list that contains known malicious domains is dangerous, as it can be used to trigger server-side request forgery (SSRF), exfiltrate environment metadata via headers, or expose the agent's IP and environment details to a malicious actor.
Recommendations
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata