skills/mukul975/anthropic-cybersecurity-skills/performing-dark-web-monitoring-for-threats/Gen Agent Trust Hub
performing-dark-web-monitoring-for-threats
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external dark web sources, creating a surface for indirect prompt injection attacks.
- Ingestion points: The
search_for_keywordsfunction inSKILL.mdfetches raw content from untrusted.onionpaste sites. Additionally,scripts/process.pyfetches and parses JSON data from a third-party ransomware monitoring repository on GitHub. - Boundary markers: There are no boundary markers or instructions to the agent to ignore embedded commands within the ingested data.
- Capability inventory: The skill possesses capabilities for network operations (
requests), file system writing (generating JSON reports), and terminal output. - Sanitization: The skill lacks sanitization, escaping, or validation logic for the content retrieved from external sources before it is processed or included in reports.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches data from several external security APIs and well-known services.
- Threat Intelligence: Queries Have I Been Pwned (
haveibeenpwned.com), URLhaus (abuse.ch), and AbuseIPDB (abuseipdb.com) for breach and malicious host data. - OSINT Sources: Fetches ransomware leak metadata from a public repository on GitHub (
raw.githubusercontent.com/joshhighet/ransomwatch). - Dark Web Access: Utilizes the Tor network (via local SOCKS5 proxy on port 9050) to access hidden services.
Audit Metadata