analyzing-network-flow-data-with-netflow
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'netflow' Python package via pip, which is the standard library for parsing the network flow formats described in the documentation.
- [SAFE]: The primary script 'scripts/agent.py' implements logic for detecting port scanning, data exfiltration, and C2 beaconing using statistical methods. It reads input data from local files and writes the analysis results to a local JSON report, with no evidence of unauthorized network communication or data exfiltration.
- [SAFE]: No patterns of prompt injection, code obfuscation, or persistence mechanisms were detected. The skill's behavior aligns entirely with its stated purpose of network flow analysis.
Audit Metadata