fuzzing-dictionary

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes methods for ingesting data from external local sources to generate dictionaries. While this involves processing untrusted content, it is restricted to local files provided by the user for the specific purpose of fuzzing.
  • Ingestion points: Local header files (header.h), binary files (./binary), and system manual pages (man).
  • Boundary markers: Not explicitly defined in the provided commands.
  • Capability inventory: Commands utilize standard utilities such as grep, strings, sed, and man, along with standard fuzzing tools like libFuzzer and AFL++.
  • Sanitization: Not applicable as the process is intended to extract raw tokens for testing purposes.
  • [COMMAND_EXECUTION]: The skill documents the use of standard Unix utilities like grep, strings, and sed to process local files. These instructions are informative and intended for manual application by a developer or security researcher to automate token extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:01 AM
Security Audit — agent-trust-hub — fuzzing-dictionary