snmptrap-receiver
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from network devices.
- Ingestion points: The skill listens for SNMP traps on a configurable UDP port (default 162) and bind address (default 0.0.0.0), as defined in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or warnings to the agent to ignore instructions that may be embedded within the received trap data.
- Capability inventory: The skill provides tools for the agent to query and retrieve trap details (
snmptrap_query,snmptrap_get_trap), which incorporates this external content into the agent's active context. - Sanitization: There is no evidence of sanitization or filtering of trap OIDs or variable bindings before the data is presented to the agent.
Audit Metadata