red
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill features an optional inference probe that sends the contents of analyzed files to an LLM endpoint (Ollama local instance or OpenAI-compatible cloud API) for analysis.
- Evidence: In
scripts/red.py, the_call_modelfunction usesurllib.request.urlopento POST file content to the configuredllm_base_urlwhen the--inferenceflag is active. - [COMMAND_EXECUTION]: The skill is implemented as a Python CLI script that performs recursive file system reads and network operations.
- Evidence: The script uses
argparsefor CLI interactions andos/globto collect files for processing. - [CREDENTIALS_UNSAFE]: The script provides standard support for using the
OPENAI_API_KEYenvironment variable to authenticate cloud-based LLM requests. - Evidence: Line 159 in
scripts/red.pyretrieves the API key viaos.environ.get("OPENAI_API_KEY", "")for inclusion in the request headers. - [SAFE]: The skill exhibits high security awareness, providing detailed instructions on its 'dual-use' nature and warning users to only run inference probes on synthetic or consented data. Its network activities are well-documented and consistent with the stated functionality.
Audit Metadata