analyzing-threat-landscape-with-misp

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions and Python scripts perform legitimate threat intelligence analysis tasks. All external communication is directed to a user-provided MISP instance URL, and sensitive information like API keys are handled as command-line arguments rather than being hardcoded.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface as it processes external threat intelligence data from MISP APIs.
  • Ingestion points: Data is ingested from MISP events via the PyMISP search method in scripts/agent.py.
  • Boundary markers: No specific boundary markers are used for the ingested content.
  • Capability inventory: The script's capabilities are limited to statistical aggregation and writing a JSON report to the local file system.
  • Sanitization: Ingested data is parsed for statistics and written to an output file without being executed or used in a way that could trigger a prompt injection attack.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:50 PM