voip-pentesting
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for utilizing established security tools such as nmap, svmap, and sippts for VoIP network discovery and protocol analysis.\n- [REMOTE_CODE_EXECUTION]: The documentation describes how to identify and test for remote code execution vulnerabilities on target VoIP systems (e.g., Asterisk) via dialplan misconfigurations.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installing legitimate security utilities from official Linux package repositories using the system's package manager.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection. 1. Ingestion points: The skill processes target network metadata and capture files (PCAP). 2. Boundary markers: Not present in the provided instructions. 3. Capability inventory: Includes the ability to execute network and audio analysis tools via the command line. 4. Sanitization: No explicit sanitization of input data is described, relying on the security posture of the individual tools used.
Audit Metadata