fort-firewall-malware-warning

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill's primary purpose is defensive, providing educational content and tools to detect malware distribution patterns and software piracy schemes.
  • [COMMAND_EXECUTION]: The skill includes shell and PowerShell commands for legitimate security verification purposes, such as querying the GitHub API for repository metadata and verifying file signatures/hashes.
  • [EXTERNAL_DOWNLOADS]: The skill references downloads from official GitHub API endpoints and releases for the legitimate 'Fort Firewall' project. These references to well-known services are used to demonstrate safe alternative practices.
  • [DATA_EXPOSURE]: Uses environment variables (GITHUB_TOKEN, VT_API_KEY) for API authentication, which is a standard and recommended practice for secret management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text (README content) for analysis, but it uses safe regex-based pattern matching (re.search) rather than dynamic execution or interpolation that could lead to injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 04:59 AM
Security Audit — agent-trust-hub — fort-firewall-malware-warning