burp-suite-testing
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes HTTP traffic from external web applications to perform security analysis, creating a surface for indirect prompt injection.
- Ingestion points: HTTP traffic logs and intercepted requests/responses as described in Phase 1 and Phase 4.
- Boundary markers: None specified for the processed data to prevent the agent from following instructions embedded in the traffic.
- Capability inventory: Generation of proof-of-concept exploits and manual analysis of vulnerability scan results.
- Sanitization: None specified for external HTTP content before interpretation by the agent.
Audit Metadata