offensive-persistence
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit system configuration files, registry entries, and scheduled tasks, which are untrusted external data sources that could contain malicious instructions.
- Ingestion points: The workflow involves auditing Windows Registry Run keys, Scheduled Tasks, WMI Event Subscriptions, systemd units, cron jobs, and SSH authorized_keys as specified in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" prompts to isolate the agent from potentially malicious content within the audited files.
- Capability inventory: The auditing process utilizes search tools (ripgrep), static analysis, binary disassembly tools, and the application of remediation code, providing a wide range of capabilities that could be targeted by an injection.
- Sanitization: No explicit sanitization or validation of the audited content is described before the agent processes and interprets the data.
Audit Metadata