network-101
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses administrative privileges via
sudoto install system packages (apache2,snmpd,samba), manage service lifecycles throughsystemctl, and modify system configuration files. - [COMMAND_EXECUTION]: It establishes inbound network access by modifying host-based firewall rules using
ufwon Linux andNew-NetFirewallRuleon Windows. - [COMMAND_EXECUTION]: The skill sets highly permissive file system permissions (
chmod 777) on specific directories to enable anonymous SMB share testing in a lab context. - [PROMPT_INJECTION]: The skill includes instructions to monitor and parse local service logs (
/var/log/apache2/access.log) which ingest untrusted network request data, creating a potential surface for indirect prompt injection. - Ingestion points: Apache access and error logs (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: System package management, firewall modification, and service control (SKILL.md).
- Sanitization: Absent.
Audit Metadata