asnmap
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to download official IP range information from well-known cloud providers, including Amazon (ip-ranges.amazonaws.com) and Google (www.gstatic.com). These are standard operational procedures for cloud infrastructure identification and originate from trusted domains.
- [COMMAND_EXECUTION]: The skill lists numerous examples of using the
asnmapCLI tool along with standard utilities likecurl,jq,masscan,nmap, andshodan. These commands are used for their intended purpose of network mapping and passive reconnaissance. - [INDIRECT_PROMPT_INJECTION]: The skill has a low attack surface for indirect prompt injection. While it processes external data (domain names, ASN numbers, and WHOIS records), these inputs are handled by specialized CLI tools rather than being directly interpolated into an LLM prompt. The instructions do not involve complex multi-step chains that would allow external data to influence the agent's core logic.
Audit Metadata