offensive-active-directory
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze untrusted external data, which creates a potential surface for indirect prompt injection.
- Ingestion points: The workflow in
SKILL.mdinvolves inspecting source code, configuration files, and binary bundles from Active Directory environments. - Boundary markers: There are no instructions or delimiters provided to help the agent distinguish between its operational instructions and potentially malicious content within the analyzed data.
- Capability inventory: The skill methodology encourages the use of file searching tools (
rg), binary analysis tools, and the execution of testing suites (npm test). - Sanitization: The instructions do not specify any sanitization or validation requirements for the external data being processed.
Audit Metadata