python-security-tools
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from remote URLs and network sockets, creating a vulnerability surface for indirect prompt injection.
- Ingestion points:
requests.get(),requests.post(),socket.recv(), andBeautifulSoupparsing of external content inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included in the code snippets.
- Capability inventory: Extensive network capabilities including raw socket control, HTTP session management, and multithreaded execution.
- Sanitization: No sanitization or validation of external input is demonstrated in the code templates.
- [EXTERNAL_DOWNLOADS]: The skill refers to several well-known and standard Python libraries used in the security industry, including
requests,beautifulsoup4,scapy,pwntools, andaiohttp. - [SAFE]: The documentation includes standard security analysis practices, such as disabling SSL verification (
verify = False) and routing traffic through a local interception proxy (127.0.0.1:8080), which are expected for the skill's stated purpose of security tool development.
Audit Metadata