skills/mukul975/anthropic-cybersecurity-skills/performing-insider-threat-investigation/Gen Agent Trust Hub
performing-insider-threat-investigation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user activity data from external CSV files to generate security risk assessments.
- Ingestion points: The
scripts/agent.pyscript reads user activity events from a CSV file specified via command-line arguments. - Boundary markers: There are no explicit boundary markers or instructions to prevent the agent from interpreting strings within the logs as commands or overriding logic.
- Capability inventory: The skill has the ability to create directories and write JSON report files to the local file system.
- Sanitization: The script does not perform validation or sanitization on the content of the CSV fields before including them in behavioral analysis and final report generation.
- [EXTERNAL_DOWNLOADS]: The skill documentation references official cybersecurity guidelines and threat mitigation resources from trusted organizations.
- References technical guides from CISA, NIST, and Microsoft Purview to support investigation procedures.
Audit Metadata