attack-path-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- Structured Security Workflow: The skill implements a rigorous process for analyzing attack paths, requiring the agent to identify entry points, trust boundaries, and reachability based on repository evidence. This promotes consistent and verifiable security reporting.
- Contextual Verification: The instructions permit network connectivity specifically to confirm deployment context and reachable surfaces. This is a standard procedure in security assessments to validate the exploitability of findings in a real-world environment.
- Evidence-Based Calibration: The skill uses comprehensive checklists for counterevidence and policy-based severity adjustment. This ensures that findings are evaluated against the repository's specific threat model rather than relying solely on automated scanner outputs.
- Integrity Constraints: Hard rules within the skill explicitly prohibit the invention of attack chains not supported by the code and require the preservation of exact affected locations, which maintains the integrity of the security analysis process.
Audit Metadata