implementing-canary-tokens-for-network-intrusion
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions installing the
requestsandcanarytoolslibraries, as well as using theflaskframework for handling webhooks.\n- [COMMAND_EXECUTION]: Example commands are provided for a script namedscripts/agent.pyand thetcpdumputility for network analysis tasks.\n- [DATA_EXFILTRATION]: The skill describes sending alert data via webhooks to external endpoints like Slack or Teams, which is consistent with its primary function of intrusion detection.\n- [PROMPT_INJECTION]: A webhook receiver logic is described in Step 4 that accepts data from untrusted external POST requests.\n - Ingestion points: The
receive_alertfunction in Step 4 ingests data fromrequest.json.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded data are included.\n
- Capability inventory: The logic uses
logging.infoto write the received data to a local log file/var/log/canary_alerts.json.\n - Sanitization: No input validation or filtering is performed on the incoming payload before logging.
Audit Metadata