opsec-discipline
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional and promotes security best practices, such as secret redaction and operational cleanup planning. It contains no malicious code, obfuscation, or unauthorized data exfiltration techniques.
- [COMMAND_EXECUTION]: The documentation includes a template command for executing a local Python script (
redact_headers.py) used for data sanitization. This is a standard utility operation within the skill's stated purpose of protecting sensitive information. - [PROMPT_INJECTION]: The skill addresses the surface area for indirect prompt injection by providing guidelines on how to sanitize captured external data before it enters the agent's context.
- Ingestion points: Processes external data sources defined as "captured traffic" and "output" in SKILL.md.
- Boundary markers: No specific delimiters are defined in this guideline file, although the focus is on redaction at the ingestion boundary.
- Capability inventory: Refers to sensitive actions such as "persistence", "lateral movement", and "exfil" in the context of OPSEC planning, though implementation code is not included in this file.
- Sanitization: Mandates the use of a redaction script to mask Authorization, Cookie, API-key, and JWT values from ingested data.
Audit Metadata