domain-osint
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow for ingesting and processing data from untrusted external sources, such as DNS records, Certificate Transparency logs, Shodan/Censys banners, and historical web archives. This ingestion of external data creates a surface for indirect prompt injection, where an attacker could place malicious instructions in publicly indexable content to influence the agent's behavior during a scan.
- Ingestion points: Data returned by
whois-dns-recon,crt.sh,shodan-censys-recon, andwayback-archivesinSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the workflow steps.
- Capability inventory: The workflow includes asset discovery, technology identification, and pivot analysis using tools like
amass,subfinder, andgithub-git-recon. - Sanitization: No explicit sanitization or validation of the external content is described before the data is incorporated into the
osint-report.
Audit Metadata