skills/mukul975/anthropic-cybersecurity-skills/auditing-tls-certificate-transparency-logs/Gen Agent Trust Hub
auditing-tls-certificate-transparency-logs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches certificate transparency data from the official crt.sh API and queries public CT log servers as part of its monitoring workflow.
- [DATA_EXFILTRATION]: Transmits discovered certificate events and alerts to user-configured external endpoints, including Slack/Teams webhooks and SMTP servers, as part of its primary alerting function.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted certificate metadata (Common Names, SANs) from public logs. Maliciously crafted strings in these logs could potentially influence an AI agent that consumes the resulting reports or alerts.
- Ingestion points:
scripts/agent.pyretrieves JSON data from thecrt.shAPI. - Boundary markers: Absent. No specific delimiters are used to wrap external content in alerts or reports.
- Capability inventory: The script can perform network requests (SMTP, webhooks), DNS resolution, and write to a local database.
- Sanitization: Absent. Certificate fields are not sanitized for potential injection patterns before being included in output.
Audit Metadata