skills/mukul975/anthropic-cybersecurity-skills/implementing-device-posture-assessment-in-zero-trust/Gen Agent Trust Hub
implementing-device-posture-assessment-in-zero-trust
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyscript executes platform-specific commands such asmanage-bde,fdesetup,lsblk,netsh, andufwto verify disk encryption and firewall configurations. These are standard operations for a device posture assessment tool. - [EXTERNAL_DOWNLOADS]: The skill communicates with well-known security service endpoints including
api.crowdstrike.comandgraph.microsoft.comto retrieve compliance data inscripts/process.py. These connections target official vendor APIs. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. Ingestion points: Compliance data fetched from EDR and MDM APIs in
scripts/process.py. Boundary markers: Absent. Capability inventory: System command execution via subprocess inscripts/agent.py. Sanitization: The skill performs standard JSON parsing without specific sanitization of the remote data before displaying it.
Audit Metadata