ad-adcs
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon the output of the certipy find command. If the target environment contains Active Directory objects with names or attributes crafted to include malicious instructions, the agent could be manipulated when parsing the unvalidated tool output.
- Ingestion points: Command output from certipy find -u user@corp.local -p pass -dc-ip DC -vulnerable -stdout as referenced in SKILL.md.
- Boundary markers: The instructions do not define delimiters or provide warnings to ignore instructions embedded within the tool's output.
- Capability inventory: The skill facilitates shell command execution using certipy req and certipy auth in SKILL.md.
- Sanitization: There is no evidence of sanitization, escaping, or filtering applied to the external content before processing.
Audit Metadata