re-ti
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external APIs which could contain malicious strings intended to influence agent behavior.
- Ingestion points: The skill ingests data via
curlrequests to VirusTotal, Hybrid Analysis, and MISP endpoints as documented inSKILL.mdandreferences/commands.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the fetched intelligence data.
- Capability inventory: The skill utilizes
curlfor network requests,jqfor parsing JSON output, anddockerfor local service orchestration. - Sanitization: No explicit sanitization or validation of the external API responses is performed before processing.
- [EXTERNAL_DOWNLOADS]: The skill references several external platforms and repositories for its core functionality.
- Fetches threat intelligence data from well-known services including
virustotal.com,hybrid-analysis.com, andany.run. - References a community-maintained Docker image for MISP provided by Harvard IT Security for local deployment.
Audit Metadata