packet-capture-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted pcap/pcapng files which could contain malicious instructions embedded in network payloads to influence the agent. Ingestion points: Input pcap/pcapng files. Boundary markers: Absent; no specific instructions to treat packet payload content as untrusted or to use delimiters. Capability inventory: Uses tshark, capinfos, and Python (scapy) to parse and visualize data. Can generate Markdown reports and PNG images. Sanitization: None mentioned.
- [COMMAND_EXECUTION]: The skill utilizes system CLI tools like tshark, capinfos, and gnuplot for data extraction and triage. This is consistent with its stated purpose of network capture analysis.
- [DYNAMIC_EXECUTION]: The agent generates and executes Python code (using scapy and matplotlib) to process CLI output and create visualizations, which is a standard pattern for data analysis tasks.
- [EXTERNAL_DOWNLOADS]: References documentation and protocol standards from well-known and trusted sources including Wireshark, IETF, ICANN, and ARIN.
Audit Metadata