scope-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific shell command snippets for the agent to use when creating asset files and filtering results.
- Evidence: The 'Step-by-Step Workflow' section in
SKILL.mdincludes shell commands usingcatandgrepto manage local files. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it directs the agent to ingest and act upon data from external, potentially attacker-controlled sources (bug bounty program pages).
- Ingestion points: Program pages, briefs, and rules from HackerOne, Bugcrowd, and Intigriti as identified in 'Step 1' of
SKILL.md. - Boundary markers: The skill does not implement delimiters or explicit instructions to the agent to ignore potentially malicious embedded content within the ingested scope documentation.
- Capability inventory: The agent is instructed to perform file system operations (file creation and filtering) and run Python code based on the parsed data, which could be leveraged by an injection attack.
- Sanitization: There is no mention of sanitizing or validating the input retrieved from the external bug bounty platforms before processing it.
Audit Metadata