offensive-c2-frameworks
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package is composed entirely of markdown documentation and YAML configuration. No executable scripts, binaries, or active code components are provided.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for the agent to ingest and analyze untrusted external data (network logs, binary files). This creates an attack surface where malicious payloads in the analyzed data could attempt to influence agent behavior.
- Ingestion points: Identification of entrypoints and configuration files during the discovery phase.
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore embedded instructions in analyzed content.
- Capability inventory: The workflow leverages tools for text search, binary inspection, and decompilation.
- Sanitization: No explicit sanitization or filtering steps are outlined for the data before it is processed by the agent.
- [SAFE]: Analysis of the instructions and metadata revealed no malicious patterns. The workflow focuses on authorized security assessments and defensive engineering.
Audit Metadata