burp-suite-testing
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The workflow involves the agent processing and analyzing HTTP traffic from external web applications, which creates a potential surface for indirect prompt injection from untrusted remote targets.\n
- Ingestion points: The skill instructs the agent to review data in Burp Suite's Proxy, HTTP history, and Repeater tabs (SKILL.md).\n
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the analyzed data.\n
- Capability inventory: The agent is tasked with browser navigation, request modification, and manual testing using Burp Suite functionalities.\n
- Sanitization: The skill does not provide methods for sanitizing external application responses before they are processed by the agent.\n- [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It does not include any scripts, binaries, or automated execution steps, which limits the direct attack surface on the host environment.
Audit Metadata