conducting-full-scope-red-team-engagement

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches certificate transparency data from crt.sh and MITRE ATT&CK data via the attackcti library. These are well-known services and libraries used legitimately for security research and threat intelligence.
  • [EXTERNAL_DOWNLOADS]: Contains a reference to c2.example.com in assets/template.md as an example Indicator of Compromise (IOC). While flagged by automated scanners, this domain is a standard placeholder used for documentation and illustrative purposes in report templates.
  • [COMMAND_EXECUTION]: Provides numerous instructional examples of command-line tools for security testing, such as amass, msfvenom, nmap, and secretsdump.py. These examples are intended for educational and operational use by security professionals and are appropriate for the skill's stated purpose.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 14, 2026, 10:35 PM