Skills
Navigate
skills/autohandai/community-skills/analyzing-malware-behavior-with-cuckoo-sandbox/Gen Agent Trust Hub

analyzing-malware-behavior-with-cuckoo-sandbox

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: CRITICAL
Full Analysis
  • [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface because it parses JSON reports generated from the execution of untrusted malware samples. Ingestion points: The scripts/agent.py file reads report.json files from the Cuckoo storage directory. Boundary markers: Absent; the script does not employ delimiters to distinguish between its own logic and the untrusted data being parsed. Capability inventory: The skill incorporates the requests library to interface with a local Cuckoo Sandbox API instance on localhost:8090. Sanitization: Absent; behavioral artifacts such as API calls, network requests, and file operations are extracted and displayed without prior validation or escaping.
  • [EXTERNAL_DOWNLOADS]: Documentation in SKILL.md and references/api-reference.md contains command-line examples referencing external domains such as http://malicious-url.com and http://malicious-site.com/payload. These are intended as placeholders for sandbox detonation tests and are not automatically accessed by the provided automation scripts.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 16, 2026, 04:55 PM
Security Audit — agent-trust-hub — analyzing-malware-behavior-with-cuckoo-sandbox