k7-total-security-unlock-patch
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [METADATA_POISONING]: The skill's name 'k7-total-security-unlock-patch' and references to 'activation keys' suggest it provides tools for license circumvention. This naming is deceptive compared to its stated purpose as a configuration framework and is often associated with unauthorized or high-risk software distributions.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a threat analysis workflow that is vulnerable to indirect prompt injection attacks.
- Ingestion points: The skill processes external threat data from 'threat_event' objects and configuration parameters from 'enterprise_security_profile.yaml' files.
- Boundary markers: The prompt templates for the OpenAI and Anthropic integrations lack clear delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill possesses the capability to execute system commands via the 'k7-console' CLI tool using the 'subprocess.run' method.
- Sanitization: There is no evidence of sanitization or validation performed on external threat data before it is interpolated into LLM prompts used to generate automated response playbooks (scripts).
- [COMMAND_EXECUTION]: The Python integration script 'k7_security_manager.py' utilizes 'subprocess.run' to execute an external command-line utility named 'k7-console'. This mechanism allows for the execution of system-level commands using parameters derived from external, potentially untrusted YAML configuration files.
- [EXTERNAL_DOWNLOADS]: The skill documentation and implementation rely on an external, non-standard CLI tool 'k7-console' and require several third-party libraries. The provenance and security of the 'k7-console' utility cannot be verified from the provided source content.
Audit Metadata