impacket-toolkit

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official source code for Impacket hosted on GitHub by Fortra.
  • [COMMAND_EXECUTION]: Provides detailed command-line examples for executing various Python scripts (e.g., psexec.py, wmiexec.py) used for remote system administration and security testing.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it instructs the agent to process data retrieved from remote network services.
  • Ingestion points: Output from tool executions such as secretsdump.py or GetUserSPNs.py (SKILL.md).
  • Boundary markers: None identified.
  • Capability inventory: Execution of local Python scripts that perform network and system operations (SKILL.md).
  • Sanitization: No explicit sanitization or validation of the data returned from remote targets is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 10:08 AM