scanning-tools
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of various command-line security tools (Nmap, Aircrack-ng, etc.) which is consistent with its stated purpose as a security scanning guide.
- [PRIVILEGE_ESCALATION]: The skill uses
sudofor commands requiring administrative privileges, such as package installation (apt install), service management (systemctl), and raw network operations (airmon-ng). This is standard practice for the tools described. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install tools via official package managers (
pip install prowler,pip install scoutsuite,apt install openvas). These are standard installation methods for well-known security assessment software. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data, such as importing Nmap XML results into Metasploit (
db_import). A mandatory confirmation gate is defined in the instructions to ensure the agent waits for explicit user authorization before performing any non-read-only actions based on ingested data.
Audit Metadata