incident-response-bec
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from phishing artifacts and mailbox evidence.\n
- Ingestion points: Input prompts, phishing message identifiers, and mailbox logs.\n
- Boundary markers: None identified in the provided skill instructions.\n
- Capability inventory: Shell script execution (vpnchecker.sh, ipir.sh) and Microsoft Graph API queries (az rest).\n
- Sanitization: No specific sanitization or filtering instructions for handling external content are specified.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute local scripts vpnchecker.sh and ipir.sh for automated IP reputation analysis.\n- [EXTERNAL_DOWNLOADS]: References an incident response playbook hosted on the author's GitHub repository (github.com/crtvrffnrt) to provide investigation context.
Audit Metadata