onvifscan
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local binary (
onvifscan) to perform security scans, authentication checks, and brute-force attacks on network-accessible IoT devices based on user-provided IPs or URLs. - [INDIRECT_PROMPT_INJECTION]: By scanning and receiving data from external ONVIF devices, the skill is exposed to untrusted inputs. Maliciously crafted device metadata or responses could be used to influence the agent's subsequent analysis or instructions.
Audit Metadata