tls-scan-testssl
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends downloading the testssl.sh utility from its official GitHub repository (github.com/drwetter/testssl.sh). This is a well-known security tool used for auditing.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to perform network security scans and redirect output to local JSON files.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses output generated by scanning external network endpoints, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Scan results stored in
testssl-results.jsonare parsed by the agent to generate findings. - Boundary markers: None identified in the parsing instructions.
- Capability inventory: The skill has the capability to execute shell commands (
testssl.sh) and perform file system operations (writing totestssl-results.json). - Sanitization: The instructions do not specify any sanitization or validation of the tool's output before the agent processes it.
Audit Metadata