nerva-scan
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The provided examples include the use of
sudo masscan. Executing commands withsudogrants administrative privileges, which is necessary for certain network operations like raw packet crafting but represents a privilege escalation vector if misused. - [EXTERNAL_DOWNLOADS]: The skill references the public GitHub repository for the
nervafingerprinting tool hosted by Praetorian Inc. - [PROMPT_INJECTION]:
- Ingestion points: The skill processes external data from files via the
-largument and from standard input via command pipes. - Boundary markers: There are no explicit markers used to distinguish untrusted input from the processing logic.
- Capability inventory: The skill utilizes command-line tools (
nerva,naabu,masscan) to perform network scanning and fingerprinting operations. - Sanitization: Input data is passed to tool arguments without documented validation or sanitization, potentially allowing for indirect prompt injection if the processed data contains malicious control sequences.
Audit Metadata