skills/mukul975/anthropic-cybersecurity-skills/hunting-for-dns-based-persistence/Gen Agent Trust Hub
hunting-for-dns-based-persistence
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/agent.pyexecutes the local system utilitydigviasubprocess.run()to perform DNS resolutions. This call uses structured arguments in a list format instead of invoking a shell context (shell=True), which mitigates command injection vectors and is standard practice for this type of utility. - [EXTERNAL_DOWNLOADS]: The script
scripts/agent.pyperforms external HTTP requests toapi.securitytrails.comto collect passive DNS data and subdomains. This communication is required to support the threat hunting functions described in the skill metadata.
Audit Metadata