wireshark

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of documentation and legitimate automation scripts for network forensics and protocol analysis.
  • [COMMAND_EXECUTION]: Python automation examples use subprocess.run to call the tshark utility. The scripts follow secure coding practices by passing arguments as a list and avoiding the use of shell=True.
  • [PRIVILEGE_ESCALATION]: Troubleshooting documentation includes standard Linux commands (e.g., sudo usermod) to grant users permission to capture network traffic. These are routine configuration steps for the tool's intended use case.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external packet capture (PCAP) data, the scripts are designed for field extraction and statistical analysis, presenting a negligible risk of prompt injection or malicious data manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 04:39 AM