adcs-certipy-attack
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process and interpret outputs from various security tools (e.g., certipy find, ldapsearch) to identify and exploit misconfigurations in ADCS. This creates an attack surface where a target environment could provide malicious responses to influence the agent's logic.
- Ingestion points: Tool outputs from certipy, ldapsearch, and curl responses (SKILL.md, references/esc-techniques.md).
- Boundary markers: None; tool output is directly consumed to drive the attack chain.
- Capability inventory: The agent is guided to use tools with network interaction, file writing, and credential extraction capabilities.
- Sanitization: No explicit filtering or validation of tool output is defined.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the certipy-ad package and the use of well-known security tools from established repositories. These resources are legitimate and their use is consistent with the skill's primary purpose of security auditing.
Audit Metadata