har-api-reverse-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and parse HAR files, which are external data sources that could contain malicious instructions or unexpected schemas.
- Ingestion points: The agent is instructed to read and parse entries from a HAR file as described in SKILL.md and references/har-extraction.md.
- Boundary markers: The instructions lack explicit delimiters or "ignore instructions" wrappers for the raw HAR data being processed.
- Capability inventory: The workflow requires file system access (read/chmod) and network capabilities (curl/requests) for verification.
- Sanitization: The skill implements mitigation by instructing the agent to discard sensitive headers (cookie, authorization) and reconstruct the request body manually.
- [DATA_EXFILTRATION]: The workflow involves handling HAR files which typically contain sensitive session data, cookies, and tokens.
- The skill provides explicit mitigation instructions: use chmod 600 for file permissions, do not commit HAR files to repositories, and resolve authentication at runtime via labels rather than replaying captured tokens.
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as curl and chmod to perform API verification and set file permissions. These are standard tools for the described debugging and security tasks.
Audit Metadata