enterprise-vpn-attack
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a large number of pre-defined shell commands for the agent to perform fingerprinting and vulnerability testing, including complex curl requests and local payload generation via python3.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to fetch and analyze content from remote, untrusted VPN servers. Maliciously crafted responses from these servers could potentially contain instructions that attempt to subvert the agent's logic.
- Ingestion points: HTTP headers, response bodies, and leaked files retrieved via curl throughout the procedures defined in SKILL.md.
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between data and instructions when processing target responses.
- Capability inventory: The agent has access to shell execution and network tools (curl), which are used to perform the assessments.
- Sanitization: The skill lacks mechanisms for sanitizing or validating external data before the agent processes it for decision-making.
Audit Metadata