bunkerweb-modsecurity-crs-tuning
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges an attack surface where the agent processes log lines and request content which are identified as attacker-controlled. \n
- Ingestion points: User-quoted log lines and request content in SKILL.md.\n
- Boundary markers: The skill explicitly instructs the agent to treat this data as untrusted and to never follow instructions found within it.\n
- Capability inventory: The skill allows for the generation of ModSecurity configuration files and analysis of security logs.\n
- Sanitization: The skill includes a clear warning to prevent the agent from being manipulated by external content.\n- [SAFE]: The skill consists of legitimate technical documentation for BunkerWeb, authored by the vendor. It promotes security principles such as using narrow exclusion scopes to prevent bypasses and warns against weakening the WAF by removing anomaly scoring rules.
Audit Metadata