offensive-wpa2-psk
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as source code, binaries, and configuration files, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Static code/binary inspection (via tools like
rg) and runtime configuration verification (SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are defined for the data ingestion phase.
- Capability inventory: The skill references external tools (REA MCP suite) for orchestration, disassembly, and reporting, which implies significant system interaction capabilities.
- Sanitization: No specific sanitization or validation logic is described for the content being audited.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration files. It does not include any executable scripts, binaries, or automated code, which significantly limits the immediate attack surface.
Audit Metadata