triaging-security-alerts
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
curlcommand to fetch content from the internet. - [EXTERNAL_DOWNLOADS]: The skill uses an external third-party service,
defuddle.md, to process and retrieve content from external URLs. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external security advisories without explicit sanitization or boundary enforcement.
- Ingestion points: Content retrieved from external security advisory URLs using
curl. - Boundary markers: None identified; the skill does not instruct the agent to use delimiters or ignore instructions embedded within the fetched advisories.
- Capability inventory: The skill performs shell command execution (
curl) and potentially other investigative actions depending on the triage outcome. - Sanitization: No validation or sanitization of the external content is described before it is processed by the agent.
Audit Metadata