Broken Authentication Testing
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific instructions for executing shell-based security tools, such as Hydra, to perform brute-force attacks against target web application login forms.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by ingesting and processing data from external, untrusted web applications. 1. Ingestion points: Target URLs, authentication endpoints, and HTTP response headers/cookies analyzed in Phase 1 and Phase 6. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to prevent the interpretation of commands that might be embedded in the target application's output. 3. Capability inventory: The skill utilizes subprocess execution for security tools (Hydra) and Python scripts with network access capabilities (requests). 4. Sanitization: There is no evidence of sanitization or validation of the data retrieved from external HTTP responses before it is processed by the agent.
Audit Metadata