performing-ssl-certificate-lifecycle-management

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements legitimate SSL/TLS certificate management workflows using well-known libraries such as cryptography and the Python standard ssl module.
  • [INDIRECT_PROMPT_INJECTION]: The skill fetches and parses X.509 certificates from user-supplied remote hosts, creating a potential attack surface for malformed certificate data.
  • Ingestion points: Remote certificates retrieved via socket and ssl connections in scripts/agent.py and scripts/process.py.
  • Boundary markers: None implemented for the parsed data report output.
  • Capability inventory: Writing files (keys, CSRs, reports) and initiating network connections.
  • Sanitization: The skill uses the cryptography library to parse the certificates, which performs inherent structural validation of the X.509 data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:24 PM