httpie
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a wrapper for the
httpandhttpscommands, enabling the agent to interact with web services. It includes bash scripts (install.sh,scrape.sh,check.sh) that use standard shell commands to coordinate installation, scrape content with browser-like headers, and perform health checks on endpoints. - [EXTERNAL_DOWNLOADS]: The
scripts/install.shscript automates the installation of thehttpiepackage from well-known and trusted package registries including PyPI (via pip), Homebrew, and Snap. These sources are considered safe under established vendor trust guidelines. - [DATA_EXFILTRATION]: While the skill allows sending data and uploading files to remote servers via the
httpcommand, this is the primary intended functionality of an HTTP client tool. There is no evidence of hardcoded exfiltration paths or suspicious background data transmission.
Audit Metadata