environment-guide
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download code and configurations from several external sources for lab setup.
- References official Ludus templates and Ansible roles from the vendor badsectorlabs.
- Recommends cloning well-known community security projects from GitHub, such as Orange-Cyberdefense/GOAD.
- Points to various community-maintained security workshops and lab environments from repositories including aleemladha/SANS-Workshop-Lab, Fromusic/GothamCity, and Pennyw0rth/NetExec-Lab.
- Instructs users to incorporate community Ansible roles from contributors like geerlingguy, synzack, and p4t12ick.
- [COMMAND_EXECUTION]: The skill guides users through executing setup scripts and Ansible playbooks to provision their training environments.
- Includes steps for running provisioning shell scripts (e.g., ./goad.sh) after cloning project repositories.
- Details the process of running Ansible playbooks from a local machine to configure range virtual machines.
- [CREDENTIALS_UNSAFE]: The documentation provides default credentials for virtual machines and services within the training labs.
- Lists common default login pairs for lab access, such as kali:password and elastic:elasticpassword.
- Includes the default administrative password for Splunk installations (admin:changeme123!).
- [INDIRECT_PROMPT_INJECTION]: The skill evaluates user-provided goals to recommend suitable laboratory environments.
- Ingestion points: User goals and training requirements provided in natural language.
- Capability inventory: The skill provides informational guidance and command templates; it does not possess direct execution capabilities.
- Boundary markers: Present as clear section headers and step-by-step workflows.
- Sanitization: Not applicable to this documentation-focused skill.
Audit Metadata