scanning-tools

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of various command-line security tools (Nmap, Aircrack-ng, etc.) which is consistent with its stated purpose as a security scanning guide.
  • [PRIVILEGE_ESCALATION]: The skill uses sudo for commands requiring administrative privileges, such as package installation (apt install), service management (systemctl), and raw network operations (airmon-ng). This is standard practice for the tools described.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install tools via official package managers (pip install prowler, pip install scoutsuite, apt install openvas). These are standard installation methods for well-known security assessment software.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data, such as importing Nmap XML results into Metasploit (db_import). A mandatory confirmation gate is defined in the instructions to ensure the agent waits for explicit user authorization before performing any non-read-only actions based on ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 06:15 AM
Security Audit — agent-trust-hub — scanning-tools