password-reset-poisoning

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses command-line tools including curl and ffuf to perform network-based security testing against web application endpoints.
  • [COMMAND_EXECUTION]: Provides a functional Python script for automating password reset token brute-forcing that utilizes the requests library.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection attack surface as it instructs the agent to analyze potentially untrusted data from external web applications.
  • Ingestion points: Reads and analyzes password reset links and email content from external targets (e.g., in Step 1 and Step 3).
  • Boundary markers: There are no explicit delimiters or instructions provided to isolate or ignore potentially malicious content within the ingested reset data.
  • Capability inventory: The skill has access to network tools (curl, ffuf), executes Python scripts, and writes evidence to the local filesystem (./engagement/evidence/).
  • Sanitization: No validation, sanitization, or escaping of the external target data is specified before it is processed or used in subsequent steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 05:10 PM
Security Audit — agent-trust-hub — password-reset-poisoning