recon-dns-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various CLI tools for network discovery, such as
dig,dnsx,dnsrecon, andfierce, to enumerate infrastructure mapping. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external, untrusted sources (DNS records) which could be manipulated by an attacker to include malicious instructions.
- Ingestion points: DNS record content (TXT, SPF, MX, CNAME) fetched from external nameservers as described in the 'Method' section of SKILL.md.
- Boundary markers: Absent; no specific delimiters or warnings are used to isolate potentially malicious record content from the agent's context.
- Capability inventory: Network operations via DNS reconnaissance tools; no file-write or subprocess execution on the returned data is explicitly defined, but the data informs subsequent agent steps.
- Sanitization: Absent; there are no instructions to sanitize or validate the content of the retrieved DNS records before processing.
Audit Metadata