hydra
Warn
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple examples for executing the
hydracommand-line utility to perform authentication testing against SSH, RDP, HTTP POST forms, FTP, and SMB. These operations involve executing subprocesses that interact with network services. - [DATA_EXFILTRATION]: The instructions direct the agent to read from local files such as
users.txtandpasswords.txtand transmit authentication attempts to external network targets. This pattern involves the reading of potentially sensitive local credential data followed by network transmission. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process output from network targets (via Hydra responses) and capture evidence, creating a surface for indirect prompt injection from untrusted remote systems.
- Ingestion points: Command output from
hydraand local wordlist files (users.txt,passwords.txt) referenced in theSKILL.mdexamples. - Boundary markers: None. The skill does not provide delimiters or instructions to ignore or sanitize embedded commands within the tool output or wordlists.
- Capability inventory: Execution of arbitrary network authentication commands via the
hydrabinary. - Sanitization: No validation or sanitization logic is described for the data ingested from target responses before it is used for evidence capture or analysis.
Audit Metadata