mythic-profiles
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing and modification of external C2 profile repositories, which presents an attack surface for indirect prompt injection.
- Ingestion points: External code files, Dockerfiles, and C2 parameters as described in SKILL.md and associated references.
- Boundary markers: None identified; there are no instructions for using delimiters to separate untrusted data.
- Capability inventory: The agent is tasked with implementation, modification, and validation of profile code, including file system access and container interaction.
- Sanitization: No explicit sanitization or validation routines for external inputs are included in the skill.
Audit Metadata