re-proto-rev
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install widely recognized analysis tools such as Scapy and crcmod via pip, as well as Tshark and Binwalk through official system package managers like apt or brew. These downloads target official and trusted repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external network traffic data (pcap files), which serves as a potential ingestion point for indirect prompt injection.
- Ingestion points: Data enters the agent's context through scapy.all.rdpcap and tshark -r operations on pcap files.
- Boundary markers: The provided scripts do not include explicit delimiters or warnings to ignore instructions that might be embedded in network traffic.
- Capability inventory: The skill's scripts are restricted to localized analysis tasks, such as frequency counting and hex representation; they do not possess capabilities to write to the filesystem or transmit data externally based on analyzed content.
- Sanitization: There is no specific sanitization or filtering applied to the network payload data during processing.
Audit Metadata