deploying-software-defined-perimeter

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements standard network diagnostic and security auditing procedures. The core scripts (scripts/agent.py and scripts/process.py) perform port scanning and SSL/TLS verification to ensure SDP components like Single Packet Authorization (SPA) and mTLS are correctly configured.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for external configuration data which defines the parameters for the SDP deployment validation.
  • Ingestion points: The scripts/process.py script accepts and parses a user-provided JSON configuration file via the --config parameter.
  • Boundary markers: The script expects structured JSON; no specific boundary markers or instructions to ignore embedded commands are present in the parsing logic.
  • Capability inventory: The script performs network socket connectivity checks (socket.connect_ex), establishes TLS connections for certificate validation (ssl.wrap_socket), and writes audit reports to a local file. No shell command execution (subprocess), dynamic code evaluation (eval/exec), or network write capabilities beyond the audit scope were found.
  • Sanitization: The script validates that the provided JSON contains expected keys before attempting to process the configuration values.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 06:32 AM