skills/mukul975/anthropic-cybersecurity-skills/configuring-active-directory-tiered-model/Gen Agent Trust Hub
configuring-active-directory-tiered-model
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The Active Directory audit script processes external data from the target directory environment, such as user account names and group memberships, which are then formatted into a report.
- Ingestion points: Active Directory object attributes (sAMAccountName, member, cn) retrieved via LDAP queries in
scripts/agent.py. - Boundary markers: Absent; retrieved data is directly interpolated into report structures and console output without delimiters.
- Capability inventory: The script possesses local file-write capabilities for JSON reports and standard output; it does not perform automated actions or command execution based on the ingested data.
- Sanitization: No sanitization or escaping is performed on the data retrieved from the Active Directory server before it is presented in the final report.
Audit Metadata