detecting-ssl-cert-issues
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check_cert_chain.pyexecutes theopensslbinary viasubprocess.runto perform certificate retrieval and OCSP checks. This is the primary function of the skill and is implemented using a list of arguments, which prevents shell-based command injection. - [PROMPT_INJECTION]: The skill processes untrusted certificate data from remote servers, which is an indirect prompt injection surface. 1. Ingestion points: Remote certificate data is fetched via OpenSSL in
scripts/check_cert_chain.py. 2. Boundary markers: No explicit delimiters are present for the processed data. 3. Capability inventory: Includessubprocess.runfor command execution. 4. Sanitization: Hostnames are extracted and validated usingurllib.parse. The logic is limited to certificate analysis and does not allow for execution of embedded content.
Audit Metadata