offensive-advanced-redteam
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze untrusted external data sources, creating a potential surface for indirect prompt injection if the analyzed content contains malicious instructions.
- Ingestion points: The workflow involves analyzing infrastructure entrypoints, source code, binaries, and configuration files in
SKILL.md. - Boundary markers: There are no explicit instructions or markers defined to delimit untrusted data from the agent's system instructions.
- Capability inventory: The skill utilizes static analysis tools, binary disassembly, and AST analysis across various phases of the audit.
- Sanitization: The instructions do not specify sanitization or validation protocols for handling potentially malicious payloads within the analyzed code or data.
Audit Metadata