aegis-denial-of-service
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted application source code and configuration files during its audit workflow. Ingestion occurs in the vulnerability identification stages, and while the skill lacks specific input sanitization for these files, it establishes boundaries by recommending bounded live probes and manual code review. Its capabilities include running local diagnostic scripts and performing network requests.
- [DYNAMIC_EXECUTION]: The skill provides Python and JavaScript code templates for a regex-timing test harness to be executed locally. These tools are used to verify the complexity of regular expressions found during analysis and do not incorporate untrusted external input into their execution logic beyond the pattern being tested.
- [COMMAND_EXECUTION]: The instructions include guidance for using curl to perform authorized vulnerability verification. These commands are structured as single-request probes to measure latency, following standard security testing protocols.
Audit Metadata