snap-o-network-inspector
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Dynamic Execution of Local Scripts: The
snapo-network interceptcommand utilizesrunpy.run_pathto load and execute Python route handlers from a file path provided by the user. This mechanism allows the skill to perform complex HTTP response overrides by running arbitrary module-level code within the specified file. - Command Execution via Subprocess: The tool relies on the
adb(Android Debug Bridge) command-line utility for communicating with connected devices. It resolves theadbexecutable from environment variables or user input and programmatically executes system commands to manage port forwarding, inspect sockets, and retrieve process metadata. - Data Sanitization (Redaction): To protect sensitive user information during network inspection, the skill includes a sanitization routine that redacts specific HTTP headers, such as
Authorization,Cookie, andSet-Cookie, from its output. - Indirect Prompt Injection Surface: As a network inspector, the skill captures and displays potentially untrusted data from external network sources.
- Ingestion points: Raw network request and response bodies are ingested in
scripts/snapo-networkthroughadbshell commands and local socket connections. - Boundary markers: The output is structured as NDJSON or plain text, but it lacks specific delimiters or warnings to instruct the agent to ignore potentially malicious embedded content.
- Capability inventory: The implementation script has access to
subprocess.run(for system interaction),runpy.run_path(for code execution), andsocketoperations. - Sanitization: While authentication headers are redacted, the content of request and response bodies is not sanitized for potential natural language instructions targeting the AI agent.
Audit Metadata