skills/galyarderlabs/galyarder-framework/executing-active-directory-attack-simulation/Gen Agent Trust Hub
executing-active-directory-attack-simulation
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile provides extensive examples of command-line tools for Active Directory security testing, includingimpacket-GetUserSPNs,mimikatz,BloodHound, andcrackmapexec. These are standard tools for penetration testing and Red Team simulations. - [DATA_EXPOSURE_AND_EXFILTRATION]: The
scripts/agent.pyscript enumerates Active Directory users and group memberships via LDAP. While it collects sensitive information about the domain's security posture, it is designed for authorized assessment and saves findings to a local JSON report specified by the user. - [DEPENDENCIES]: The skill requires
impacketandldap3, which are widely recognized and legitimate Python libraries for network protocol interaction and LDAP management. These are documented inreferences/api-reference.mdand checked at runtime inscripts/agent.py. - [PREREQUISITES]: The instructions explicitly state that usage requires written authorization from the domain owner and coordination to avoid operational impact, aligning with ethical security testing standards.
Audit Metadata