skills/mukul975/anthropic-cybersecurity-skills/hunting-for-dns-based-persistence/Gen Agent Trust Hub
hunting-for-dns-based-persistence
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript executes thedigcommand viasubprocess.run. The command is constructed using a list of arguments and does not useshell=True, which prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill interacts with the SecurityTrails API (
api.securitytrails.com) to retrieve passive DNS history and subdomain lists. This is a well-known service for security analysis and is used in a transparent manner via an API key. - [DATA_EXFILTRATION]: While the skill communicates with an external API and writes a local report, its behavior is strictly limited to querying DNS metadata for the specified target domain and does not access sensitive system files or credentials.
Audit Metadata