mid-engagement-ir-detection
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash and Python scripts designed to measure response times and analyze log files. Specifically, it uses
curlto probe targets andpython3to diff baseline snapshots against current activity. - [INDIRECT_PROMPT_INJECTION]: The skill's core functionality relies on processing untrusted data from external targets to detect security state changes.
- Ingestion points: The agent ingests data from HTTP response headers, WAF cookies (e.g.,
cf-bm,awselb), and external log files such aso365_results.jsonlcontaining AADSTS error codes. - Boundary markers: The skill includes a mandatory confirmation gate requiring target URLs, IP addresses, and written authorization before any active probing occurs.
- Capability inventory: The skill possesses the capability to execute shell commands, perform network requests via
curl, and perform file system read/write operations within the engagement directory. - Sanitization: There is no evidence of sanitization or escaping applied to the external response headers or cookie values before they are logged or processed by the monitoring scripts.
Audit Metadata