threat-modeling-mindmap
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a framework for threat modeling and mind-mapping a target application. It contains no executable code, remote downloads, or credential-stealing patterns.
- [COMMAND_EXECUTION]: The skill provides examples of common command-line security tools used by security researchers (e.g.,
katana,gau,waybackurls,linkfinder.py). These are presented as reference templates for the user to understand the workflow and do not execute automatically. - [PROMPT_INJECTION]: No evidence of prompt injection, role-play bypasses, or instructions to override AI safety guidelines was found. The instructions focus on structured data analysis and security testing methodology.
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were detected. The skill outlines how to organize findings locally.
Audit Metadata