x-security
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with the x-cmd CLI ecosystem to execute security tools like shodan, osv, and kev. These are legitimate command-line utilities for security assessment. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from security APIs (Shodan, OSV) and local filesystem scans (osv scanner). \n
- Ingestion points: Data enters the agent context through the outputs of
x shodan,x osv, andx kevcommands (SKILL.md). \n - Boundary markers: None explicitly defined in the skill instructions to delimit tool output. \n
- Capability inventory: The skill utilizes network scanning (
shodan scan), DNS resolution (shodan dns), and local dependency scanning (osv scanner) (SKILL.md). \n - Sanitization: No explicit sanitization or filtering of external API data is mentioned in the instructions.
Audit Metadata