skills/mukul975/anthropic-cybersecurity-skills/performing-malware-hash-enrichment-with-virustotal/Gen Agent Trust Hub
performing-malware-hash-enrichment-with-virustotal
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The agent.py script communicates with VirusTotal, a well-known service, to fetch threat intelligence data. It also reads local files to compute MD5, SHA1, and SHA256 hashes as part of its core functionality.
- [PROMPT_INJECTION]: Ingestion points: The skill processes external data from VirusTotal API responses (e.g., threat tags, classification names) and local file paths. Boundary markers: Absent; there are no delimiters or instructions to ignore embedded content in retrieved metadata. Capability inventory: The script reads local files and performs network GET requests to the VirusTotal API. Sanitization: Absent; the skill prints raw external data and file metadata directly to standard output.
Audit Metadata