Skills
Navigate
skills/autohandai/community-skills/analyzing-indicators-of-compromise/Gen Agent Trust Hub

analyzing-indicators-of-compromise

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: CRITICALSAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (IP addresses, domains, URLs, and file hashes) typically sourced from security alerts or phishing emails.
  • Ingestion points: scripts/agent.py and SKILL.md ingest IOC values for enrichment.
  • Boundary markers: The skill incorporates "defanging" (e.g., changing . to [.]) to prevent accidental execution/navigation within documentation, though it lacks explicit boundary markers for the LLM when processing raw indicators.
  • Capability inventory: scripts/agent.py uses the requests library to perform network operations against VirusTotal, AbuseIPDB, and MalwareBazaar.
  • Sanitization: The script includes classification and validation logic to identify IOC types before enrichment, reducing the risk of processing malformed inputs.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 16, 2026, 08:10 AM
Security Audit — agent-trust-hub — analyzing-indicators-of-compromise