skills/mukul975/anthropic-cybersecurity-skills/implementing-bgp-security-with-rpki/Gen Agent Trust Hub
implementing-bgp-security-with-rpki
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Rust toolchain installer from the official sh.rustup.rs domain to facilitate the installation of the routinator validator.
- [COMMAND_EXECUTION]: Instructions include the use of sudo for package management and the creation of a systemd unit file to ensure the RPKI validator runs as a persistent service. These are typical administrative tasks for the stated objective of deploying network security infrastructure.
- [REMOTE_CODE_EXECUTION]: Executes the official Rust installation script via a shell pipe. This is a well-known and standard method for installing Rust-based tooling.
- [DATA_EXFILTRATION]: The provided Python agent performs network requests to RIPE NCC and Cloudflare APIs. These operations are limited to fetching public routing and RPKI metadata required for the agent's core reporting functionality.
- [PROMPT_INJECTION]: The skill exhibits a potential indirect prompt injection surface as the monitoring script processes external data from third-party APIs.
- Ingestion points: scripts/agent.py retrieves data from stat.ripe.net and rpki.cloudflare.com.
- Boundary markers: Absent; API responses are parsed directly as JSON.
- Capability inventory: File writing (JSON reports), network requests, and administrative shell commands in the deployment guide.
- Sanitization: None; the data is processed as structured telemetry.
Audit Metadata