re-attribution

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install third-party libraries and tools, including python-whois, networkx, and dnsx. The dnsx tool is sourced from the official repository of a well-known security tool provider on GitHub.
  • [COMMAND_EXECUTION]: The skill utilizes command-line utilities such as whois and dnsx to perform infrastructure, ASN, and DNS analysis. These are standard tools in a security analyst's environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data such as IOCs (domains, IPs), certificates, and threat reports as ingestion points. It possesses capabilities to execute shell commands and perform network queries using this data. However, the skill includes significant boundary markers and sanitization instructions, explicitly mandating that all processed data be anonymized ("脱敏") and requiring the use of abstract code names instead of identifying specific organizations or victims in the analysis context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:09 AM