tls-scan-testssl

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends downloading the testssl.sh utility from its official GitHub repository (github.com/drwetter/testssl.sh). This is a well-known security tool used for auditing.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to perform network security scans and redirect output to local JSON files.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses output generated by scanning external network endpoints, which could potentially contain malicious instructions intended to influence the agent's behavior.
  • Ingestion points: Scan results stored in testssl-results.json are parsed by the agent to generate findings.
  • Boundary markers: None identified in the parsing instructions.
  • Capability inventory: The skill has the capability to execute shell commands (testssl.sh) and perform file system operations (writing to testssl-results.json).
  • Sanitization: The instructions do not specify any sanitization or validation of the tool's output before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 06:47 PM
Security Audit — agent-trust-hub — tls-scan-testssl