mitm-subdomains
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill relies on analyzing captured network traffic from log.txt, which is untrusted data. Malicious traffic could contain payloads designed to influence agent behavior.
- Ingestion points: The log.txt mitmproxy dump is the primary input for the enumeration tasks.
- Boundary markers: The instructions lack delimiters or explicit directives to treat the log content as untrusted.
- Capability inventory: The instructions focus on analytical tasks like listing and identifying patterns; there are no subprocess calls or network write operations defined in the skill content.
- Sanitization: There is no mentioned sanitization or filtering of the captured traffic data before processing.
Audit Metadata