skills/mukul975/anthropic-cybersecurity-skills/performing-api-inventory-and-discovery/Gen Agent Trust Hub
performing-api-inventory-and-discovery
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript utilizes thesubprocess.runfunction to execute the system'snslookuputility. This is used specifically for DNS enumeration to identify subdomains associated with API services, which is a standard procedure in attack surface mapping. - [EXTERNAL_DOWNLOADS]: The skill uses the
requestsPython library to interact with external URLs provided by the user. These interactions include probing for common API paths, fetching Swagger/OpenAPI documentation, and retrieving JavaScript files for static analysis. This behavior is essential for the tool's primary purpose of endpoint discovery. - [SAFE]: The tool follows common security auditing practices and does not include any indicators of prompt injection, data exfiltration, or persistence. The provided scripts are transparent and perform only the actions described in the documentation.
Audit Metadata