cracking-passwords
Fail
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to fetch security wordlists from the well-known SecLists repository on GitHub and references other official security tool documentation sites.
- [COMMAND_EXECUTION]: Contains extensive references for local shell commands involving password cracking utilities (Hashcat, John the Ripper), network authentication testing tools (Hydra, Medusa), and wordlist generation tools (CeWL, crunch).
- [PRIVILEGE_ESCALATION]: Includes techniques for dumping system credentials using tools like mimikatz and secretsdump.py, which are standard components of authorized security assessments and penetration tests.
- [CREDENTIALS_UNSAFE]: The skill instructs the agent on how to extract, identify, and process password hashes. It explicitly mandates security best practices, such as encrypting recovered plaintext at rest and adhering to data retention contracts.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata