memcache-pentesting
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various shell commands for network scanning and service interaction. This includes the use of Nmap scripts, Netcat for protocol commands, Metasploit modules, and PHP one-liners for data retrieval.- [PRIVILEGE_ESCALATION]: The skill instructs the user or agent to install system packages using administrative privileges. Evidence includes the use of
sudo apt install libmemcached-toolsandsudo apt-get install php-memcachedfor environment preparation.- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from remote Memcached servers, creating a vulnerability surface for indirect prompt injection. - Ingestion points: Data is retrieved via
nc,memccat, andphpcommands inSKILL.md(Phase 3) andreferences/memcache-techniques.md. - Boundary markers: No delimiters or safety instructions are provided to distinguish retrieved cache content from agent instructions.
- Capability inventory: The skill possesses extensive capabilities including shell command execution, network access, and package installation.
- Sanitization: Content retrieved from the remote server is processed without sanitization or validation.
Audit Metadata