skills/mukul975/anthropic-cybersecurity-skills/analyzing-email-headers-for-phishing-investigation/Gen Agent Trust Hub
analyzing-email-headers-for-phishing-investigation
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Th e sc ri p t
s c ri p ts / ag e n t . p yu se ss ub pr o ce s s . r u nt o ex ec u t e t h edi gu t i li t y for DNS lo o k u p s . Th i s i s im p l em e n te d sa fe l y b y pa s si n g ar g u m en t s a s a li st to pr ev e n t sh e l l in j ec t io n . \n - [EXTERNAL_DOWNLOADS]: Th e sk i l l u se s
c u r lt o in te ra c t w i t h we l l - kn o w n se c u r it y pl a tf o r m s s u ch a s Vir u s To t a l a n d Abu se I P DB t o re tr i ev e r ep u t a t i o n da ta . \n
- [DATA_EXFILTRATION]: Ex tr ac te d IP ad d r es se s an d do m a i n n am e s fr o m su s p i ci o u s em a i l s ar e se n t to ex te r na l AP I s for an a l y si s . Wh i l e t h i s i s th e in t en de d fu n ct i o n al i ty , i t in v o l ve s tr an sm i t t in g da ta fr o m lo ca l fo r en s i c ev i de n ce to th i r d
- p ar t y s er v i ce s . \n
- [PROMPT_INJECTION]: Th e sk i l l pr oc es se s un tr u st e d EM L an d PS T fi l es , cr ea t in g an in d i r ec t pr o m p t in j ec t io n su r fa ce wh e r e m a li ci o u s in s tr u c ti o n s w i t h in t he em a i l he ad e r s or bo d y co u l d in f lu e n ce ag e n t be ha v i o r . \n
- **In ge s ti o n po in t s **: Un tr u st e d da ta en te r s vi a
pa r s e_ em a i l_ fi l ean d in l i n e Py t h o n sn i p pe ts th a t re ad fo re n s i c im a ge s . \n - **Bo un da r y m ar k e rs **: No ex p li ci t m ar ke r s ar e u se d to is o l a t e em a i l con te n t or wa r n t h e ag en t ab o u t em b e dd ed in s tr u c ti on s . \n
- **Ca pa b i l it y in v en t o r y **: Th e sk il l ha s fi le sy st em ac c es s , ne t wo r k ca pa bi li t ie s , an d co m m an d ex e cu t i on . \n
- **Sa ni t i za t i o n **: Re li e s on st an da r d li br a r ie s an d re ge x fo r pa r si n g w i th o u t sp ec i fi c se cu ri t y fi lt er i n g fo r in je c t io n pa tt er n s .
Audit Metadata