mitm-find-enumerable
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes
log.txt, a mitmproxy capture file containing raw HTTP traffic. Because this file contains untrusted external data, an attacker could inject malicious instructions into HTTP headers or message bodies within the traffic. If the agent analyzes this file without specific safety boundaries, it could be misled by instructions embedded in the log data. - Ingestion points: The skill is primarily driven by the analysis of
log.txtin the current directory. - Capability inventory: The skill provides templates for shell commands and instructs the agent to generate
curlcommands for bulk testing and data extraction. - Boundary markers: The skill does not define specific delimiters or instructions to ignore content within the log file.
- Sanitization: No sanitization or validation of the log content is performed before analysis.
- [COMMAND_EXECUTION]: The skill encourages the agent to generate and execute shell loops using
curlto iterate through sequential or predictable resource identifiers. While these are intended for security auditing, they facilitate automated data extraction from target endpoints.
Audit Metadata