skills/mukul975/anthropic-cybersecurity-skills/implementing-threat-intelligence-lifecycle-management/Gen Agent Trust Hub
implementing-threat-intelligence-lifecycle-management
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches threat intelligence data from well-known and authoritative cybersecurity sources, including the CISA Known Exploited Vulnerabilities catalog, AlienVault OTX, MalwareBazaar (abuse.ch), and VirusTotal.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted threat intelligence data from external APIs and local files.\n
- Ingestion points: Data is ingested from external feed URLs in SKILL.md and through local file parsing in scripts/agent.py (load_ioc_feed).\n
- Boundary markers: No explicit markers are used to separate ingested data from instructions within the logic, however, the skill primarily handles structured data objects.\n
- Capability inventory: The skill utilizes the requests library for network communication and performs local file read/write operations for reporting.\n
- Sanitization: The scripts/agent.py script employs robust regex-based extraction (extract_iocs) to isolate specific indicator types (IPs, domains, hashes), which serves to sanitize incoming unstructured text data.
Audit Metadata