mitm-find-checksum
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze data from
log.txt(mitmproxy traffic logs) and interpolates$ARGUMENTS, both of which are untrusted external sources. This creates a surface for indirect prompt injection where malicious content within the logs or arguments could attempt to influence the agent's analysis. - Ingestion points: Reads from
log.txtand uses$ARGUMENTSin the instruction body. - Boundary markers: No specific delimiters or warnings are provided to ignore embedded instructions within the log data.
- Capability inventory: The agent is instructed to use shell tools like
curlfor network requests andmitmdumpfor traffic capture. - Sanitization: No sanitization or validation of the external content is described before processing.
Audit Metadata