offensive-tls-attacks
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, creating a potential attack surface for indirect prompt injection.
- Ingestion points: The operational workflow (SKILL.md) identifies entrypoints including static code, binary files, configuration files, and runtime configuration traces.
- Capability inventory: The skill instructs the agent to perform source search, binary inspection, AST analysis, implement remediation code, and write automated regression tests (SKILL.md).
- Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore embedded instructions within the analyzed source code or configuration files.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the external content before it is processed by the agent.
Audit Metadata