skills/jeremylongshore/tons-of-skills-marketplace/fingerprinting-server-software/Gen Agent Trust Hub
fingerprinting-server-software
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external HTTP responses, including headers, cookies, and error page bodies. Ingestion points: Data is collected in
scripts/fingerprint_server.pyfrom responses provided by target URLs. Boundary markers: Explicit boundary markers for the external data are absent in the prompt interpolation. Capability inventory: The skill usesBash(python3:*)which facilitates network operations via therequestslibrary and local file writing for reporting. Sanitization: The script uses regex patterns to filter for specific version signatures rather than treating input as executable instructions. - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/fingerprint_server.py) to perform its scanning logic, which is standard functionality for this tool type. - [DATA_EXPOSURE]: The skill performs reconnaissance on network targets specified by the user. This involves fetching response metadata, which is the stated purpose of the tool and is protected by an explicit authorization flag requirement.
Audit Metadata