network-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection due to its core function of analyzing untrusted external data sources combined with powerful environmental tools.\n
- Ingestion points: Network traffic analysis (tcpdump, Wireshark), flow log correlation, and application layer data fetching (curl, wget) are all points where external data enters the agent context as described in SKILL.md.\n
- Boundary markers: The instructions in SKILL.md are absent of delimiters or warnings to ignore instructions embedded within the analyzed data.\n
- Capability inventory: The skill in SKILL.md includes access to infrastructure automation (Ansible, Terraform), network diagnostic utilities (nmap, tcpdump), and general CLI operations.\n
- Sanitization: There is no mention of sanitizing, escaping, or validating external content before processing in the provided instructions.
Audit Metadata