cyberstrike-eino-demo
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a repository of vulnerability payloads (SQLi, XSS, SSRF) within
scripts/payloads.txtandSKILL.mdfor processing by security tools.\n - Ingestion points:
scripts/payloads.txtandSKILL.mdpayload samples.\n - Boundary markers: Content is explicitly labeled as teaching placeholders for authorized use.\n
- Capability inventory: Mentions the use of
sqlmap,nuclei, andffuffor verification.\n - Sanitization: No sanitization is applied as the strings are intended for security probing.\n- [COMMAND_EXECUTION]: Documentation references the execution of security-focused CLI tools including
sqlmap,nuclei, andffuf. Additionally,scripts/check-env.shcontains a harmless environment check (uname -s).\n- [DATA_EXFILTRATION]: Contains example payload strings for sensitive file access (/etc/passwd) and loopback network probes (127.0.0.1), intended for use in authorized penetration testing scenarios.
Audit Metadata