hunting-advanced-persistent-threats
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and methodology guide for cybersecurity threat hunting. It does not contain executable code, scripts, or commands that pose a risk to the agent's environment.
- [SAFE]: All external URL references target well-known and trusted cybersecurity resources, specifically the MITRE ATT&CK framework (attack.mitre.org).
- [SAFE]: The provided code snippets are templates for domain-specific query languages (Velociraptor VQL, osquery SQL, and Splunk SPL) intended for use in external security platforms. These are not executed by the agent runtime itself.
- [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found. The skill includes appropriate usage guidelines and 'Red Flags' to ensure safe and authorized operation by the user.
Audit Metadata