ipfix-receiver
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing untrusted network flow data.
- Ingestion points: The skill opens a UDP port (default 2055) to receive IPFIX and NetFlow records from any network device capable of reaching the host as described in the
Configurationsection ofSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between valid flow metadata and potentially malicious strings embedded within the records.
- Capability inventory: The skill provides tools like
ipfix_query_flowsandipfix_get_flowthat allow the agent to read and process the contents of these records. - Sanitization: The instructions do not define any validation or sanitization logic for the data received over the network before it is presented to the agent.
- [DATA_EXFILTRATION]: The default configuration poses a risk of unintended network exposure.
- The
IPFIX_BIND_ADDRESSenvironment variable defaults to0.0.0.0, which binds the UDP listener to all available network interfaces. Without proper firewalling, this exposes the skill's data ingestion point to external or untrusted networks.
Audit Metadata