skills/mukul975/anthropic-cybersecurity-skills/testing-api-for-mass-assignment-vulnerability/Gen Agent Trust Hub
testing-api-for-mass-assignment-vulnerability
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the standard
requestslibrary for its core functionality of interacting with API endpoints. This is a well-known and legitimate dependency for network-based security testing. - [COMMAND_EXECUTION]: The
scripts/agent.pyscript executes network requests and writes test results to a local JSON file. These operations are restricted to target URLs provided by the user and a designated local output directory (./mass_assign_test), which is standard behavior for vulnerability scanning tools. - [SAFE]: No evidence of prompt injection, multi-layer obfuscation, or persistent backdoors was found. The code and instructions align with the stated purpose of identifying and reporting API security flaws.
Audit Metadata