scan
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill constructs and executes shell commands for tools like nmap, nikto, and sqlmap by directly interpolating the $ARGUMENTS variable. This lack of input sanitization allows for potential command injection if a target string containing shell metacharacters is provided.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes output from external targets, which is untrusted data that could be crafted to influence the agent's logic or reports. 1. Ingestion points: Output from scanning tools (nmap, nikto, sqlmap, curl). 2. Boundary markers: None identified. 3. Capability inventory: Extensive shell execution (bash, nmap, sqlmap). 4. Sanitization: No evidence of sanitization of tool output before processing.
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the !
commandsyntax to check for local scripts at load time. While this specific usage is benign, it represents automatic shell execution when the skill is accessed.
Audit Metadata