azure-network-calculator
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: SKILL.md mandates the immediate execution of a curl shell command to a local notification service at http://localhost:8888/notify. The command involves string interpolation of workflow names and actions, which poses a risk of command injection if untrusted user input is included.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a CIDR master allocation table and customization files in a user-writable local directory. 1. Ingestion points: External CIDR master allocation file and customization files in the ~/.claude/skills/PAI/USER/SKILLCUSTOMIZATIONS/ directory. 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution (curl), local file reading, and infrastructure-as-code (Terraform) generation. 4. Sanitization: None identified.
- [EXTERNAL_DOWNLOADS]: The skill generates Terraform code that utilizes official Azure Verified Modules (AVM) from the Azure organization on GitHub. These modules are well-known, trusted infrastructure components for network resource provisioning.
Recommendations
- AI detected serious security threats
Audit Metadata