offensive-zigbee-thread-matter
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and YAML metadata. No executable scripts, shell commands, or automated workflows are included in the provided files.
- [NO_CODE]: There is no functional code provided within the skill. All content is descriptive and intended to guide an AI agent's behavior during a security assessment.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for analyzing external source code and binary data. This creates a surface for indirect prompt injection where a malicious target file could contain instructions for the AI agent. However, as the skill only provides high-level guidance and does not implement the data ingestion logic itself, no immediate threat is present.
Audit Metadata