wireshark
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and legitimate automation scripts for network forensics and protocol analysis.
- [COMMAND_EXECUTION]: Python automation examples use
subprocess.runto call thetsharkutility. The scripts follow secure coding practices by passing arguments as a list and avoiding the use ofshell=True. - [PRIVILEGE_ESCALATION]: Troubleshooting documentation includes standard Linux commands (e.g.,
sudo usermod) to grant users permission to capture network traffic. These are routine configuration steps for the tool's intended use case. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external packet capture (PCAP) data, the scripts are designed for field extraction and statistical analysis, presenting a negligible risk of prompt injection or malicious data manipulation.
Audit Metadata