continuous-exposure-monitoring
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and recipes for continuous security monitoring using established tools.
- [DATA_EXPOSURE_&_EXFILTRATION]: All network operations are directed towards well-known or trusted CTI sources such as GitHub (ransomwatch), Reddit, and HackerNews (Algolia). The documented webhook payloads are standard for Slack integrations.
- [COMMAND_EXECUTION]: The skill includes shell (Bash) and PowerShell recipes for scheduling scans. These are provided as transparent, copy-paste templates for legitimate administrative tasks.
- [PRIVILEGE_ESCALATION]: There are no attempts to escalate privileges. The use of
sudoor similar commands is absent, and scheduling tasks is presented as a standard user-level operation. - [OBFUSCATION]: The content is clear and well-documented. No hidden or encoded malicious strings were found.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of adversary-controlled content (chatter monitoring) and explicitly instructs the agent and user to treat such data as TENTATIVE and to use isolated environments (VMs/Tails) for validation.
Audit Metadata