hunt-subdomain
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze data from external, untrusted web resources, specifically HTTP response headers and body content. A malicious actor controlling a target subdomain could serve content designed to influence the agent's subsequent logic or tool execution.
- Ingestion points: HTTP response headers and bodies fetched via
curlandaws s3api(SKILL.md). - Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore embedded instructions when analyzing these external inputs.
- Capability inventory: The skill provides a wide array of capabilities including shell command execution (
subfinder,nuclei,subjack,aws cli) and network operations (SKILL.md). - Sanitization: There is no evidence of sanitization, validation, or escaping of the content retrieved from external sources before it is processed by the agent.
Audit Metadata