skills/mukul975/anthropic-cybersecurity-skills/performing-lateral-movement-detection/Gen Agent Trust Hub
performing-lateral-movement-detection
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No behavioral overrides, system prompt extraction, or safety filter bypass instructions were found.
- [CREDENTIALS_UNSAFE]: No hardcoded passwords, tokens, keys, or unsafe credential stores are present.
- [DATA_EXFILTRATION]: The skill operates entirely locally on input CSV files and does not perform any network requests or remote data transmissions.
- [OBFUSCATION]: All source code and markdown documents are written in clear, plain text with no hidden scripts, zero-width characters, or encoded payloads.
- [REMOTE_CODE_EXECUTION]: No remote packages or scripts are downloaded, piped, or executed at runtime.
- [PRIVILEGE_ESCALATION]: No elevated privilege commands, such as sudo or execution policy bypasses, are included.
- [PERSISTENCE]: The skill contains no persistence mechanisms or scheduled tasks creation routines on the host system.
- [INDIRECT_PROMPT_INJECTION]: The Python agent script ingests untrusted log files in CSV format, which represents a data ingestion surface. However, it parses them safely using the standard library's structured
csv.DictReaderand exports the aggregated alerts into structured JSON format without performing unsafe interpretation or prompt interpolation. - [DYNAMIC_EXECUTION]: There is no usage of dangerous functions such as eval, exec, or runtime script generation.
- [DYNAMIC_CONTEXT_INJECTION]: No dynamic context execution placeholders or load-time command execution sequences are used in the markdown files.
- [SAFE]: The skill is a standard detection engineering tool that complies with secure coding practices.
Audit Metadata