offensive-fuzzing-course
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and procedural guidance for software testing. It contains no executable scripts, hardcoded credentials, or network exfiltration patterns.
- [INDIRECT_PROMPT_INJECTION]: The operational workflow instructs the agent to ingest and analyze external, untrusted source code and binaries.
- Ingestion points: Static code, binaries, trust boundaries, and configuration files identified during the inventory phase (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded content are defined in the curriculum.
- Capability inventory: The skill references the use of REA MCP tools for analysis and decompilation, though no implementation logic is contained within this skill.
- Sanitization: There are no documented sanitization or validation steps for content extracted from target software.
Audit Metadata