domain-osint

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill defines a workflow for ingesting and processing data from untrusted external sources, such as DNS records, Certificate Transparency logs, Shodan/Censys banners, and historical web archives. This ingestion of external data creates a surface for indirect prompt injection, where an attacker could place malicious instructions in publicly indexable content to influence the agent's behavior during a scan.
  • Ingestion points: Data returned by whois-dns-recon, crt.sh, shodan-censys-recon, and wayback-archives in SKILL.md.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the workflow steps.
  • Capability inventory: The workflow includes asset discovery, technology identification, and pivot analysis using tools like amass, subfinder, and github-git-recon.
  • Sanitization: No explicit sanitization or validation of the external content is described before the data is incorporated into the osint-report.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 09:30 AM
Security Audit — agent-trust-hub — domain-osint