subnetting

Fail

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Python code in Example 2 (NetworkScanner) that executes the system ping command using subprocess.run. This pattern involves executing system binaries based on network parameters provided to the skill.
  • [PRIVILEGE_ESCALATION]: Example 3 contains Go code (Route Table Manager) that provides functions to add or delete system routes using exec.Command to run the route utility. Modifying routing tables is a privileged operation that can be used to intercept or redirect network traffic, which poses a significant security risk if executed without strict oversight.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process network definitions such as CIDR strings and network lists from external sources. These inputs are then used to drive active network operations including scanning and routing configuration.
  • Ingestion points: The cidr parameter in NetworkScanner.scan_network and various SubnetCalculator methods, as well as the networks list in summarize_networks (SKILL.md).
  • Boundary markers: None are present to distinguish between instructional data and network parameters.
  • Capability inventory: The skill includes capabilities for system command execution (subprocess.run), socket-based network scanning (socket.connect_ex), and system configuration modification (exec.Command for routing).
  • Sanitization: The code relies on standard library parsing (ipaddress in Python and net in Go), which validates IP formats but does not prevent the misuse of the resulting network operations against unintended targets.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 16, 2026, 06:25 PM