dnsenum
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for executing the dnsenum command-line utility to perform network discovery and subdomain enumeration.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where it ingests untrusted data from external, potentially attacker-controlled DNS servers.
- Ingestion points: DNS resource records (such as TXT, MX, or A records) fetched from remote nameservers during the execution of commands defined in SKILL.md.
- Boundary markers: Absent; the instructions do not include specific delimiters or directions to the agent to treat the tool output as untrusted content.
- Capability inventory: The skill uses command-line execution for the dnsenum utility to interact with network services.
- Sanitization: Absent; there are no specified procedures for validating or filtering the DNS records before they are incorporated into the agent's context.
Audit Metadata