skills/aeondave/malskill/autopsy/Gen Agent Trust Hub

autopsy

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official website autopsy.com for downloading the forensic platform, which is a well-known and trusted source for this type of software.
  • [COMMAND_EXECUTION]: The instructions include common forensic tasks using tools like autopsy, binwalk, steghide, and zsteg. It also suggests installing necessary utilities via standard package managers such as apt, pip, and gem.
  • [PRIVILEGE_ESCALATION]: The skill uses sudo for administrative tasks necessary in a forensics environment, such as installing system packages and mounting forensic disk images for analysis.
  • [INDIRECT_PROMPT_INJECTION]: As a forensics tool, the skill is designed to process untrusted external data sources such as disk images and local filesystems. 1. Ingestion points: Disk images, VM files, and logical files are added as data sources in SKILL.md. 2. Boundary markers: The skill does not implement specific boundary markers to isolate instructions within analyzed data. 3. Capability inventory: The skill utilizes a variety of binary analysis and extraction tools including autopsy, binwalk, and zsteg across SKILL.md and references/forensic-case-flow.md. 4. Sanitization: No specific sanitization procedures are mentioned for the content extracted from images before it is processed or searched.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 10:40 PM
Security Audit — agent-trust-hub — autopsy