detecting-golden-ticket-forgery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes Windows Security event logs in XML format, which constitutes an untrusted data source. Maliciously crafted log entries could potentially influence the AI agent's behavior if the resulting analysis report is processed as instructions.
- Ingestion points: The
scripts/agent.pyscript reads external XML files via the--evtx-xmlcommand-line argument. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between the analysis metadata and the potentially untrusted content of the logs themselves.
- Capability inventory: The skill possesses capabilities to read from the local file system (to parse logs) and write to the local file system (to generate reports).
- Sanitization: The script does not perform sanitization or validation of the strings extracted from the XML
EventDatafields (e.g.,TargetUserName,ServiceName) before they are included in the JSON report. - [METADATA_POISONING]: There is a discrepancy between the author listed in the SKILL.md frontmatter ("mahipal") and the author identified in the LICENSE file and system metadata ("mukul975"). This inconsistency is a form of metadata deception.
Audit Metadata