skills/mukul975/anthropic-cybersecurity-skills/implementing-taxii-server-with-opentaxii/Gen Agent Trust Hub
implementing-taxii-server-with-opentaxii
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions involve installing various Python packages from the official PyPI registry, including 'medallion', 'stix2', 'taxii2-client', 'opentaxii', and 'cabby'. These are well-known libraries for threat intelligence sharing.- [COMMAND_EXECUTION]: The Docker Compose configuration and server administration examples use shell commands to install dependencies and manage the TAXII service, which is expected for deployment tasks.- [DATA_EXFILTRATION]: The skill includes functionality to forward cyber threat intelligence (STIX objects) to external endpoints such as Splunk or Elasticsearch. This is a core intended functionality of the skill for automated indicator exchange.- [CREDENTIALS_UNSAFE]: The documentation and scripts include placeholder credentials and default passwords (e.g., 'admin_password_change_me', 'admin123') for local setup and demonstration purposes. Users are explicitly advised to change these in production settings.
Audit Metadata