skills/mukul975/anthropic-cybersecurity-skills/implementing-vulnerability-remediation-sla/Gen Agent Trust Hub
implementing-vulnerability-remediation-sla
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data which could lead to indirect prompt injection or the generation of malicious report content.
- Ingestion points: The script
scripts/process.pyreads vulnerability and asset data from user-provided CSV files viapandas.read_csv(). - Boundary markers: No boundary markers or instructions are provided to delineate untrusted data from the agent's core logic or to warn the agent about potential embedded instructions.
- Capability inventory:
scripts/process.pyhas the capability to write CSV and HTML files to the local file system.scripts/agent.pyperforms network GET requests to user-defined targets using provided credentials. - Sanitization: Data from the CSV files is directly interpolated into HTML dashboard templates using f-strings in
scripts/process.pywithout sanitization or escaping, which could allow for the injection of malicious instructions or script content into the resulting output.
Audit Metadata