netcat
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses
!command`` syntax to execute shell commands (command -v ncandnc -h) automatically when the skill is loaded to check for tool availability and version information.\n- [COMMAND_EXECUTION]: The instructions explicitly describe how to establish reverse shells using various Netcat implementations, including the use of the-eflag andmkfifopipes to redirect shell access over the network.\n- [DATA_EXFILTRATION]: The skill provides patterns for transferring files and entire directories to remote targets usingncandtarpipes, which can be utilized to move sensitive data out of the environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by interpolating user-provided target and port arguments directly into shell commands. While it mentions validation against a scope file, the documentation lacks explicit sanitization patterns for these external inputs.
Audit Metadata