monitoring-darkweb-sources
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to well-known external services including Have I Been Pwned, Dehashed, and Ransomware.live for data retrieval.
- [COMMAND_EXECUTION]: Includes documentation for using shell commands (
curl,jq) to manually search paste site repositories. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: External breach and leak data is ingested into the agent environment via the
scripts/agent.pyscript. - Boundary markers: Neither the script output nor the instructions provide boundary delimiters for the external data ingested.
- Capability inventory: The provided Python script has capabilities for making network requests and writing to the local file system.
- Sanitization: The skill does not sanitize or validate strings returned from the external APIs before they are included in reports.
Audit Metadata