unknown-vector-analysis
Warn
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Proof-of-Concept (PoC) code and security research from external sources including GitHub and public exploit databases using
WebFetch. - [COMMAND_EXECUTION]: Employs numerous system utilities for artifact analysis such as
strace,ltrace,objdump,readelf,ldd,strings, andfile. It also utilizespython3for executing exploits and serving files. - [DATA_EXFILTRATION]: Accesses sensitive target information including process environment variables via
/proc/<pid>/environand command lines via/proc/<pid>/cmdlineduring the characterization phase. - [REMOTE_CODE_EXECUTION]: Downloads and adapts external PoC scripts for execution on the target system to verify vulnerabilities.
- [PROMPT_INJECTION]: The skill ingests untrusted data from target artifacts and external websites, creating an attack surface for indirect prompt injection.
- Ingestion points: Local files read via
catand web content retrieved viaWebFetch. - Boundary markers: None identified; the skill does not use specific delimiters or warnings to ignore embedded instructions in the processed data.
- Capability inventory: Includes shell command execution, filesystem access, and network operations.
- Sanitization: No explicit sanitization or validation of the ingested content is performed before processing.
Audit Metadata