recon-techstack-fingerprinting
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from target web applications (headers, HTML, JavaScript) to influence the selection of subsequent attack tools and vulnerabilities.
- Ingestion points: External data enters the context through outputs from tools like
httpx,whatweb,wappalyzer, andnucleiwhich parse target websites. - Boundary markers: The skill lacks explicit instructions for the agent to treat tool output as untrusted data or to ignore instructions embedded in the target's web signals.
- Capability inventory: The skill has the capability to trigger further network interactions and tool executions based on the fingerprinting results (e.g., routing to
api-graphqlor specific CVE shortlists). - Sanitization: There are no documented procedures for sanitizing or validating the strings identified in the target's stack before they are interpolated into the agent's decision-making prompt.
Audit Metadata