crypto-protocol-diagram

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and visualization utility for cryptographic protocols. The workflow follows standard analysis patterns without malicious behavior.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates fetching protocol specifications from remote URLs using a web retrieval tool. This is a documented functional requirement for analyzing RFCs and academic papers and is performed in a safe, user-directed manner.
  • [COMMAND_EXECUTION]: The skill utilizes the rg (ripgrep) utility to search for protocol-related keywords and cryptographic primitives within source code. This is a standard and safe application of search tools for static analysis.
  • [PROMPT_INJECTION]: The skill processes untrusted input from source code and external specifications, creating a surface for indirect prompt injection.
  • Ingestion points: Analyzes local files and content retrieved from external URLs via WebFetch.
  • Boundary markers: The workflow does not explicitly instruct the agent to use delimiters or ignore instructions embedded in the analyzed content.
  • Capability inventory: Includes file reading, ripgrep searching, network fetching, and writing diagram files to the filesystem.
  • Sanitization: No specific input validation or sanitization steps are defined in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — crypto-protocol-diagram