Skills
skills/jeremylongshore/claude-code-plugins-plus-skills/analyzing-security-headers/Gen Agent Trust Hub

analyzing-security-headers

Warn

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_report.py contains a generate_script function that writes provided content to a file and executes chmod 0o755 to make it executable. This allows for the creation and execution of arbitrary shell scripts on the host system.
  • [DATA_EXFILTRATION]: The scripts/analyze_headers.py script performs recursive directory traversal using rglob('*'). This functionality can be used to map and inspect local file system structures, potentially exposing sensitive file metadata or locations.
  • [COMMAND_EXECUTION]: There is a functional discrepancy between the skill's stated purpose in SKILL.md (web header analysis using requests) and the actual code implementation (local file system analysis). This misleading documentation obscures the script's actual behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 11:43 PM