skills/mukul975/anthropic-cybersecurity-skills/analyzing-network-flow-data-with-netflow/Gen Agent Trust Hub
analyzing-network-flow-data-with-netflow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
netflowPython package. This is a common and legitimate library for decoding NetFlow and IPFIX packets.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external flow data, which represents a potential attack surface where malicious data could attempt to influence agent behavior. The current implementation uses statistical analysis and generates a local report, which significantly mitigates this risk.\n - Ingestion points: Data is loaded from JSON flow files or read from binary captures in
scripts/agent.py.\n - Boundary markers: The instructions do not define specific markers or warnings to isolate the parsed data from the agent's core logic.\n
- Capability inventory: The skill includes functions in
scripts/agent.pyfor reading from the file system and writing analysis results to JSON files.\n - Sanitization: The script uses
json.load()for structured data handling and specific NetFlow field extraction via thenetflowlibrary, providing validation against direct command injection via flow records.
Audit Metadata