common-exploit-verification
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a structured framework for ingesting untrusted data (user-reported vulnerability findings) and transforming it into functional Proof of Concept documentation.
- Ingestion points: Vulnerability details provided by the user are processed in
SKILL.mdandreferences/exploit-playbook.mdto build reports. - Boundary markers: The PoC templates do not define explicit delimiters to isolate user-provided data from the resulting shell commands or HTML payloads.
- Capability inventory: The skill facilitates the generation of functional payloads, including
curlcommands,adbshell commands, and HTML forms for CSRF. - Sanitization: There are no instructions for sanitizing or validating user-provided input before it is interpolated into the generated PoC payloads.
Audit Metadata