fort-firewall-malware-warning
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill's primary purpose is defensive, providing educational content and tools to detect malware distribution patterns and software piracy schemes.
- [COMMAND_EXECUTION]: The skill includes shell and PowerShell commands for legitimate security verification purposes, such as querying the GitHub API for repository metadata and verifying file signatures/hashes.
- [EXTERNAL_DOWNLOADS]: The skill references downloads from official GitHub API endpoints and releases for the legitimate 'Fort Firewall' project. These references to well-known services are used to demonstrate safe alternative practices.
- [DATA_EXPOSURE]: Uses environment variables (
GITHUB_TOKEN,VT_API_KEY) for API authentication, which is a standard and recommended practice for secret management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text (README content) for analysis, but it uses safe regex-based pattern matching (
re.search) rather than dynamic execution or interpolation that could lead to injection.
Audit Metadata