skills/mukul975/anthropic-cybersecurity-skills/analyzing-supply-chain-malware-artifacts/Gen Agent Trust Hub
analyzing-supply-chain-malware-artifacts
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to analyze untrusted third-party artifacts such as PE binaries and package manifests for malware indicators. This ingestion of untrusted data constitutes an indirect prompt injection surface where malicious content within the analyzed files could attempt to influence the agent's behavior.\n
- Ingestion points: The PE comparison script in
SKILL.mdand the auditing functions inscripts/agent.pyread content from files likepackage.jsonandsetup.py.\n - Boundary markers: No delimiters or specific instructions are implemented to isolate the analyzed content from the agent's processing logic.\n
- Capability inventory: The skill performs file reading, hash calculation, string pattern matching, and queries to public software registries (npm, PyPI).\n
- Sanitization: There is no sanitization or escaping of the content read from untrusted files before it is processed or reported.\n- [EXTERNAL_DOWNLOADS]: The
scripts/agent.pyutility fetches package metadata from official software registries to verify package information and maintainer details.\n - Evidence: Network requests are made to
registry.npmjs.organdpypi.orgto check the status of specific packages.
Audit Metadata