network-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes untrusted external network data. \n
- Ingestion points: Processes external network data from DNS resolution chains, HTTP responses via curl, and packet captures from tcpdump or wireshark (SKILL.md). \n
- Boundary markers: The instructions do not specify the use of delimiters or instructions to ignore potential instructions embedded within the analyzed network data. \n
- Capability inventory: The skill utilizes shell-based diagnostic tools such as curl, ping, and tcpdump to interact with the environment (SKILL.md). \n
- Sanitization: No explicit sanitization or validation of the ingested network data is defined. \n- [SAFE]: The identified indirect prompt injection surface is inherent to the skill's primary purpose as a network diagnostic tool. No malicious intent, obfuscation, or unauthorized access patterns were detected.
Audit Metadata