skills/mukul975/anthropic-cybersecurity-skills/analyzing-outlook-pst-for-email-forensics/Gen Agent Trust Hub
analyzing-outlook-pst-for-email-forensics
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of PST/OST files. These files contain emails, headers, and attachments originating from external senders, which can include malicious instructions targeting the AI agent's logic.
- Ingestion points: The script
scripts/agent.pyand the Python example inSKILL.mdprocess user-provided mailbox files viapypff. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the extraction logic.
- Capability inventory: The skill possesses file system write capabilities (saving attachments and reports) and provides a series of shell commands for external forensic tools.
- Sanitization: While
scripts/agent.pyperforms basic filename sanitization for extracted attachments, it does not sanitize or filter the text content of emails (subjects, bodies, headers) which are extracted verbatim into reports. - [COMMAND_EXECUTION]: The skill provides numerous shell commands for third-party forensic tools such as
pffexport,pffinfo, andreadpst. The agent is expected to execute these commands on the host system to perform the analysis.
Audit Metadata