skills/mukul975/anthropic-cybersecurity-skills/performing-ics-asset-discovery-with-claroty/Gen Agent Trust Hub
performing-ics-asset-discovery-with-claroty
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external sources including the Claroty API and local CMDB CSV files to generate reports and risk summaries (found in SKILL.md and scripts/agent.py). \n
- Ingestion points: Data is retrieved via
get_assets,get_vulnerabilities, andload_inventorymethods.\n - Boundary markers: The skill does not employ explicit delimiters or instructions to isolate external data from the agent's prompt context.\n
- Capability inventory: The skill can perform network requests and write to the local file system.\n
- Sanitization: No significant sanitization or validation of the ingested strings is performed before they are presented to the agent or exported.\n- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
services.nvd.nist.govto retrieve vulnerability information (SKILL.md). This targets a well-known and trusted public security database. The skill also requires the installation of the standardrequestslibrary.\n- [COMMAND_EXECUTION]: The skill provides a command-line interface viascripts/agent.pyand instructions in SKILL.md for executing discovery and validation tasks.
Audit Metadata