noir
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches binaries and source code from the official OWASP Noir GitHub repository (github.com/owasp-noir/noir) and official Docker registry (ghcr.io/owasp-noir).
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute binaries from the project's official releases, which is a standard procedure for this command-line utility.
- [COMMAND_EXECUTION]: Employs shell commands via the Bash tool for installation and operations, including wget, chmod, git, docker, and the noir binary itself.
- [PRIVILEGE_ESCALATION]: Recommends using sudo to move or copy the binary into the system path (/usr/local/bin), a standard administrative task for software installation.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local source code and ingests the results, creating a potential surface for indirect prompt injection if the scanned code contains adversarial instructions designed to influence the agent when it reads the analysis output.
- Ingestion points: Scanner output files such as endpoints.json and findings.sarif generated from local source code.
- Boundary markers: No specific boundary markers or delimiters are provided to isolate the tool's output within the agent context.
- Capability inventory: The agent has access to Bash, Read, Glob, and Grep tools.
- Sanitization: No explicit sanitization or filtering of the discovered endpoint data is performed before processing.
Audit Metadata