hunt-aspnet
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from untrusted external sources, specifically HTTP responses from target web applications (found in SKILL.md). This data ingestion, combined with the agent's capability to execute shell commands (curl) and Python scripts, creates a surface for indirect prompt injection. A malicious target could theoretically serve content designed to influence the agent's subsequent actions.\n
- Ingestion points: External target URLs probed during the vulnerability hunting process.\n
- Boundary markers: The instructions do not define specific delimiters to separate untrusted target output from the agent's internal reasoning or instructions.\n
- Capability inventory: The skill utilizes shell execution (curl) and a Python environment (requests, re, json) to interact with targets.\n
- Sanitization: There are no explicit sanitization or filtering steps mentioned for processing the raw response data from targets before analysis.
Audit Metadata