re-protocol
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions well-known DNS services (dns.google and cloudflare-dns.com) as targets for identifying encrypted DNS-over-HTTPS (DoH) traffic patterns during forensic analysis.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially malicious external network data. \n
- Ingestion points: Network traffic captures (PCAP) and live protocol streams acquired via
re-netcap. \n - Boundary markers: The protocol explicitly mandates execution within a sandboxed network environment (e.g., using INetSim or fake DNS) to prevent unauthorized external connections during sample analysis. \n
- Capability inventory: Includes network traffic capture, cryptographic decryption, and state machine reconstruction capabilities. \n
- Sanitization: The workflow incorporates entropy identification and structural header validation to confirm the nature of processed data.- [DYNAMIC_EXECUTION]: The skill guides the generation of custom Python scripts for traffic decryption and Scapy-based parsers for reconstructing custom protocols, which are standard practices in protocol analysis.
Audit Metadata