red-team-tools
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed around the execution of numerous security-focused CLI tools (e.g.,
amass,subfinder,nuclei,httpx,ffuf,dalfox). It instructs the agent to perform extensive shell-based operations, including directory creation and complex piping of tool outputs. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process data from external, untrusted sources like the Wayback Machine and subdomain enumeration services. This data could theoretically contain malicious content designed to influence the agent's behavior.
- Ingestion points: Data enters the context via tools like
waybackurls,gau, andsubfinder(e.g., inSKILL.md). - Boundary markers: There are no explicit instructions to the agent to treat output from these tools as untrusted or to ignore embedded instructions within that data.
- Capability inventory: The skill has access to extensive network operations and file system writes across multiple scripts and workflows.
- Sanitization: The provided bash scripts and workflows do not include steps to sanitize or validate the external data before processing it or saving it to the local system.
Audit Metadata