analyzing-malware-behavior-with-cuckoo-sandbox
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill accepts and submits arbitrary external URLs (see "Submit URL for analysis" in SKILL.md and references/api-reference.md) and scripts/agent.py loads Cuckoo JSON reports and explicitly parses network HTTP entries and bodies (analyze_network and the report-printing snippets), so untrusted third-party HTTP content is ingested and used to compute scores and signatures that influence analysis results.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata