find-hidden-subdomains
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Certificate Transparency logs and passive DNS sources which could theoretically contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data enters the context from crt.sh JSON outputs and the results of tools like subfinder and amass in SKILL.md.
- Boundary markers: The instructions do not implement specific delimiters or 'ignore' instructions for the retrieved data before it is processed by subsequent tools.
- Capability inventory: The skill uses bash commands including curl, subfinder, amass, and dnsx for data retrieval and resolution.
- Sanitization: No explicit sanitization or filtering of external hostnames is described before the data is utilized in command lines.
- [COMMAND_EXECUTION]: The skill provides several bash command snippets for querying certificate databases and resolving DNS records using curl, jq, sed, subfinder, amass, and dnsx in SKILL.md.
- [DATA_EXPOSURE]: The skill identifies a public, read-only Postgres database for Certificate Transparency logs (crt.sh) using well-known public guest credentials ('guest'). This is a documented feature of the public service and does not constitute a secret exposure.
Audit Metadata