skills/mukul975/anthropic-cybersecurity-skills/deploying-software-defined-perimeter/Gen Agent Trust Hub
deploying-software-defined-perimeter
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements standard network diagnostic and security auditing procedures. The core scripts (
scripts/agent.pyandscripts/process.py) perform port scanning and SSL/TLS verification to ensure SDP components like Single Packet Authorization (SPA) and mTLS are correctly configured. - [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface for external configuration data which defines the parameters for the SDP deployment validation.
- Ingestion points: The
scripts/process.pyscript accepts and parses a user-provided JSON configuration file via the--configparameter. - Boundary markers: The script expects structured JSON; no specific boundary markers or instructions to ignore embedded commands are present in the parsing logic.
- Capability inventory: The script performs network socket connectivity checks (
socket.connect_ex), establishes TLS connections for certificate validation (ssl.wrap_socket), and writes audit reports to a local file. No shell command execution (subprocess), dynamic code evaluation (eval/exec), or network write capabilities beyond the audit scope were found. - Sanitization: The script validates that the provided JSON contains expected keys before attempting to process the configuration values.
Audit Metadata