avira-internet-security-loader-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple high-privilege system inspection commands, such as exporting registry hives (reg export), reading security event logs (Get-EventLog), and listing network connections (netstat).
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process content from untrusted external sources, specifically suspicious GitHub repositories.
- Ingestion points: The skill analyzes files and metadata from a target repository, such as README content and file structures.
- Boundary markers: The instructions include prominent warnings to perform analysis only within disposable virtual machines or isolated sandboxes.
- Capability inventory: The skill possesses a broad set of capabilities for file system exploration, network monitoring, process listing, and registry extraction.
- Sanitization: No specific input sanitization is mentioned; the skill relies on the user following environment isolation protocols.
Audit Metadata