Skills
Navigate
skills/j4flmao/agent-skills/security-data-security/Gen Agent Trust Hub

security-data-security

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection vulnerability surface. It is designed to ingest and classify untrusted data from file systems, database schemas, and network scan results, which could contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: references/data-discovery-classification.md (via crawl_file_system and content_scan_for_sensitive_data functions).
  • Boundary markers: Absent; the instructions in SKILL.md do not define delimiters for untrusted data or provide warnings to the agent to ignore embedded instructions.
  • Capability inventory: The skill includes capabilities to interact with cloud APIs (AWS KMS via boto3), perform database operations, and access the local file system.
  • Sanitization: No logic is provided to sanitize or validate the content of discovered data before it enters the agent's context.
  • [COMMAND_EXECUTION]: The skill executes external system commands via Python libraries to perform its stated purpose of data discovery.
  • Evidence: references/data-discovery-classification.md uses the nmap utility through the python-nmap library to scan network ranges for data services.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 02:14 PM
Security Audit — agent-trust-hub — security-data-security