penetration-testing

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The PenetrationTester class in references/automated-penetration-testing-framework.md uses subprocess.run to execute the testssl.sh utility. The security-checklist.sh script also performs file system writes and environment manipulations standard for shell scripts.
  • [INDIRECT_PROMPT_INJECTION]: As a tool designed to process external targets (URLs) and report on vulnerabilities, the skill has an inherent attack surface for indirect prompt injection if an attacker-controlled site returns malicious payloads meant to influence the agent's reporting or subsequent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM