amass
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official Amass binaries and source code from the OWASP organization's GitHub repository during the installation steps.
- [COMMAND_EXECUTION]: Executes the amass CLI and related utilities such as wget, unzip, and docker to perform subdomain discovery and network mapping.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external DNS records and subdomain names which could potentially contain malicious injection strings designed to influence the agent's behavior during result analysis. 1. Ingestion points: amass_output.json file parsed in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: subprocess.run and file system access in the Python script. 4. Sanitization: Absent.
Audit Metadata