bitdefender-malware-investigation
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill describes how to query the VirusTotal and GitHub APIs using
curlto check the reputation of a suspicious repository. These references target well-known services and are used for legitimate security analysis purposes. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze potentially malicious data from a third-party repository, which creates an attack surface for indirect prompt injection.
- Ingestion points: The skill instructs the agent to analyze metadata and code from the
MistDuckCount/Bitdefender-Total-Security-Crack-2026GitHub repository. - Boundary markers: The skill contains explicit security warnings and specific instructions for the AI agent to warn the user about the repository's risks.
- Capability inventory: The skill uses
curlfor network requests to security APIs and includes example Go code for file reading and regex-based scanning. - Sanitization: The skill mandates the use of isolated virtual machines or sandboxes for behavioral analysis and emphasizes static analysis for initial triage.
Audit Metadata