aegis-dns-takeover
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external sources including Terraform configurations, Kubernetes manifests, Nginx site files, and environment templates to build a domain inventory. This represents an indirect prompt injection surface where malicious instructions could be embedded in the repository artifacts being audited.
- Ingestion points: Hostname claims are extracted from files such as
infra/**/*.tf,**/ingress*.yaml,nginx/*.conf, and documentation markdown files (docs/**,README*). - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the analyzed artifacts.
- Capability inventory: The skill generates and recommends the execution of shell commands (
dig,curl,ripgrep) and provides a monitoring script template (dangling-sweep.sh). - Sanitization: The instructions do not include specific sanitization or validation of strings extracted from the repository before they are processed or used to generate live verification commands.
- [COMMAND_EXECUTION]: The skill provides numerous shell commands and a monitoring script for auditing DNS records. These commands (e.g.,
dig,curl,ripgrep) are core to the skill's function as a security tool and are intended for use by a security professional within an authorized environment.
Audit Metadata