executing-red-team-exercise
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the MITRE ATT&CK STIX bundle from GitHub to provide up-to-date technique mappings. The source repository is a well-known and reputable service for cybersecurity data.\n- [COMMAND_EXECUTION]: The provided Python script (
scripts/agent.py) performs local file read/write operations for caching MITRE data and saving exercise plans. These operations are standard for a planning tool and do not involve arbitrary command execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external JSON data from the MITRE ATT&CK repository.\n - Ingestion points: JSON data fetched from the MITRE CTI GitHub repository via scripts/agent.py.\n
- Boundary markers: None explicitly implemented; the script uses fixed keys for parsing structured data.\n
- Capability inventory: Local filesystem access for writing JSON reports.\n
- Sanitization: None; the data is trusted based on the source's reputation.
Audit Metadata