exploit-chain-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts and internal CLI tools to manage security findings. These operations are restricted to the skill's environment and authorized data directories.\n- [INDIRECT_PROMPT_INJECTION]: The skill contains a surface for processing findings data that could potentially be influenced by external inputs.\n
- Ingestion points: Findings data and de-escalated leads are loaded through the
finding-trackercommand-line tool.\n - Boundary markers: The skill instructions emphasize the use of structured command-line flags to isolate data fields.\n
- Capability inventory: File system write operations for reporting and execution of local security tools.\n
- Sanitization: The
slugfunction inscripts/chain_packet.pyuses a strict allow-list regex ([^a-zA-Z0-9_.-]+) to sanitize strings used in filename generation, effectively preventing directory traversal attacks.
Audit Metadata