penetration-testing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
PenetrationTesterclass inreferences/automated-penetration-testing-framework.mdusessubprocess.runto execute thetestssl.shutility. Thesecurity-checklist.shscript also performs file system writes and environment manipulations standard for shell scripts. - [INDIRECT_PROMPT_INJECTION]: As a tool designed to process external targets (URLs) and report on vulnerabilities, the skill has an inherent attack surface for indirect prompt injection if an attacker-controlled site returns malicious payloads meant to influence the agent's reporting or subsequent actions.
Audit Metadata