fort-firewall-malware-warning
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches repository metadata and release information from GitHub's official API (api.github.com) and provides scripts to download official releases from known project repositories for verification purposes.
- [COMMAND_EXECUTION]: Provides utility scripts in Python, Bash, and PowerShell that use tools like curl, jq, and Get-AuthenticodeSignature to perform security audits, verify digital signatures, and calculate file hashes.
- [INDIRECT_PROMPT_INJECTION]: The skill contains functions designed to ingest and analyze untrusted external data (such as repository README content and metadata). While this presents a theoretical attack surface, the logic is focused on pattern detection rather than executable interpolation, and is consistent with its primary purpose as a security auditing tool.
Audit Metadata