pop-pentesting
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous commands for utilizing standard security tools such as
nmap,hydra,medusa,ncrack, andmsfconsole. These are used for service discovery, banner grabbing, and credential auditing as part of the pentesting methodology. - [DYNAMIC_EXECUTION]: In
references/pop-techniques.md, a Python script snippet is provided to automate email extraction. The skill instructs the agent to execute this code to interact with a POP3 server. - [INDIRECT_PROMPT_INJECTION]: The skill documents how to download and preview email content using
RETRandTOPcommands. This creates an attack surface where malicious instructions embedded in an email could influence the agent's behavior during analysis. - Ingestion points: Email headers and body content retrieved from external POP3 servers (SKILL.md Phase 4; references/pop-techniques.md).
- Boundary markers: None identified. The content is directly output or processed.
- Capability inventory: Subprocess execution for networking tools, file system interaction via shell commands, and Python interpretation.
- Sanitization: No sanitization or escaping of the retrieved email content is specified before the agent processes it.
Audit Metadata