{"slug":"elementalsouls-hunt-grpc","source_name":"elementalsouls/hunt-grpc","name":"Elementalsouls/Hunt gRPC","description":"Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on internal endpoints, plaintext gRPC over HTTP/2, internal endpoint disclosure, proto file leakage, gRPC-Web/grpc-gateway transcoding injection, and HTTP/2 Rapid Reset DoS (CVE-2023-44487). Use when target exposes port 50051 / 443 / 8443 / 9090 with HTTP/2, when grpcurl/grpcui detects reflection, when an Envoy or grpc-gateway proxy is fronting a microservice, or wh","version":1,"lift":{"pass_rate_delta_pts":4.35,"pass_rate_pct":69.6,"total_cases":23,"passed_cases":16,"tokens_delta_pct":182.6,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T13:41:47.116832+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":4.35,"with_pass_pct":69.6,"without_pass_pct":65.2,"tokens_delta_pct":182.6,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-09T13:41:47.116832+00:00","run_id":"85dd266f-4d26-44d7-aa88-92701ee35222","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"25da93f715e3fbe0257bd3126eeeef7769af630366993c71400c2b514f8cb307","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-grpc/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-grpc"}