The Agent Skills Directory

[SAFE]: No evidence of direct prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation was detected. The skill uses neutral instructional language to guide the agent in performing cryptographic audits.
[SAFE]: The skill references several well-known and trusted external resources, including NIST standards, Mozilla's SSL configuration generator, and the OWASP TLS Cheat Sheet, for the purpose of providing accurate remediation guidance.
[NO_CODE]: The skill consists entirely of instructional markdown and configuration metadata. No executable scripts, binaries, or automated installation procedures are included in the package.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it is designed to ingest and process untrusted data from external sources during its operation.
Ingestion points: The skill explicitly requests server configuration files and certificate chain PEM files from the user if they are not already available in the context.
Boundary markers: There are no specified delimiters or instructions to ignore embedded commands within the processed configuration or certificate data.
Capability inventory: The skill generates structured JSON reports and remediation snippets. It does not possess capabilities for file system modification, network communication, or arbitrary command execution.
Sanitization: The instructions do not include specific steps to sanitize or validate the content of the ingested files before processing.

Cryptographic Security Validator