dns-security
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a read-only audit workflow using standard, restricted tools (Read, Grep, Glob) to evaluate local DNS configuration files.
- [PROMPT_INJECTION]: The skill includes a 'Prompt Injection Safety Notice' section that explicitly instructs the agent to treat all configuration content as untrusted data and to ignore any instructions embedded in DNS records or comments, mitigating potential indirect injection attacks.
- [DATA_EXFILTRATION]: While the skill accesses sensitive network configuration files (e.g., named.conf, resolv.conf), it lacks network capabilities and does not attempt to transmit data externally.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script downloads, package installations, or dynamic code execution. The frameworks referenced (NIST, CIS) are used purely for documentation and compliance mapping.
Audit Metadata