skills/mukul975/anthropic-cybersecurity-skills/detecting-credential-dumping-techniques/Gen Agent Trust Hub
detecting-credential-dumping-techniques
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external Sysmon/Windows event log XML data, which could potentially contain malicious content aimed at influencing the agent's analysis.
- Ingestion points: The
parse_sysmon_xmlfunction inscripts/agent.pyparses XML files provided by the user. - Boundary markers: The skill does not implement specific delimiters or instructions to ignore potential commands embedded within the log data.
- Capability inventory: The script's capabilities are restricted to local file read/write operations; it does not utilize network libraries or execute subprocesses.
- Sanitization: Data is handled through standard XML parsing without additional filtering for prompt injection markers.
Audit Metadata