audit-base
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing security tools (such as naabu) via Go from ProjectDiscovery's GitHub repository. ProjectDiscovery is a well-known and reputable vendor for security instrumentation tools.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to probe and ingest data from external HTTP services and DNS records. Processing untrusted content from remote targets creates a surface for potential indirect prompt injection attacks where malicious server responses could influence the agent's behavior.
Audit Metadata