subnetting
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python code in Example 2 (
NetworkScanner) that executes the systempingcommand usingsubprocess.run. This pattern involves executing system binaries based on network parameters provided to the skill. - [PRIVILEGE_ESCALATION]: Example 3 contains Go code (
Route Table Manager) that provides functions to add or delete system routes usingexec.Commandto run therouteutility. Modifying routing tables is a privileged operation that can be used to intercept or redirect network traffic, which poses a significant security risk if executed without strict oversight. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process network definitions such as CIDR strings and network lists from external sources. These inputs are then used to drive active network operations including scanning and routing configuration.
- Ingestion points: The
cidrparameter inNetworkScanner.scan_networkand variousSubnetCalculatormethods, as well as thenetworkslist insummarize_networks(SKILL.md). - Boundary markers: None are present to distinguish between instructional data and network parameters.
- Capability inventory: The skill includes capabilities for system command execution (
subprocess.run), socket-based network scanning (socket.connect_ex), and system configuration modification (exec.Commandfor routing). - Sanitization: The code relies on standard library parsing (
ipaddressin Python andnetin Go), which validates IP formats but does not prevent the misuse of the resulting network operations against unintended targets.
Recommendations
- AI detected serious security threats
Audit Metadata