http-request-smuggling Eval report.

Task wording matches this skill metadata.

• Evaluate http-request-smuggling before installing it in an agent workflow
• coding-agents
• Coding agents workflows; Claude Code teams; builders willing to evaluate younger projects

Install handoff is available.

• npx skills add forefy/.context --skill http-request-smuggling

standard package or runtime install path

• npx skills add forefy/.context --skill http-request-smuggling

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 144 GitHub stars
• MIT

Needs review

• The SKILL.md excerpt is truncated, but the visible content indicates a well-structured and complete skill. No critical issues found.

Usable candidate, but the agent should surface permission and audit notes before installation.

• Require human approval before installing into a real workspace.
• The SKILL.md excerpt is truncated, but the visible content indicates a well-structured and complete skill. No critical issues found.

MIT

• MIT

network or browser access

• Browser automation: medium
• Network access: medium