dt-sec-ioc-hunting
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface in
ioc-intake.mdby processing external threat reports and advisory URLs. 1. Ingestion points: Untrusted text from pasted reports and fetched advisory URLs. 2. Boundary markers: The skill uses structured DQL templates to isolate IoC values, though explicit markers for the raw input text are not defined in the query body. 3. Capability inventory: Execution of DQL queries on logs and spans. 4. Sanitization:ioc-intake.mdincludes logic to defang URLs (e.g., replacing hxxp), strip STIX wrappers, and validate IP address formats. - [COMMAND_EXECUTION]: The skill dynamically generates domain-specific language (DQL) queries by interpolating extracted IoCs into templates found in
hunt-logs.mdandhunt-spans.md. While standard for this workflow, the assembly of queries from external inputs requires strict adherence to templates to prevent injection. - [SAFE]: The skill implements strong resource management and safety controls:
hunt-logs.mdenforces IoC chunking to prevent query complexity failures;timeframe-gating.mdmandates user approval for search expansion beyond 15 minutes; andsecondary-observable-extraction.mdprovides a recursion guard to limit automatic re-hunting to one level.
Audit Metadata