detecting-kerberoasting-attacks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a data ingestion surface by processing external log files (EVTX, JSON, CSV).
- Ingestion points: The
parse_tgs_eventsfunction inscripts/agent.pyand theparse_logsfunction inscripts/process.pyingest data from external files supplied via command-line arguments. - Boundary markers: Absent. The scripts do not explicitly delimit the ingested log content when generating reports.
- Capability inventory: The scripts possess file-system read capabilities (for logs) and write capabilities (for JSON and Markdown reports). No dynamic code execution (eval/exec) or network operations are present.
- Sanitization: Absent. Log data is extracted and placed directly into detection findings and reports. While this presents a surface for potential markdown injection in generated reports, the risk is minimal as the output is intended for human review and is not used to drive secondary agent actions.
Audit Metadata