autopsy
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official website
autopsy.comfor downloading the forensic platform, which is a well-known and trusted source for this type of software. - [COMMAND_EXECUTION]: The instructions include common forensic tasks using tools like
autopsy,binwalk,steghide, andzsteg. It also suggests installing necessary utilities via standard package managers such asapt,pip, andgem. - [PRIVILEGE_ESCALATION]: The skill uses
sudofor administrative tasks necessary in a forensics environment, such as installing system packages and mounting forensic disk images for analysis. - [INDIRECT_PROMPT_INJECTION]: As a forensics tool, the skill is designed to process untrusted external data sources such as disk images and local filesystems. 1. Ingestion points: Disk images, VM files, and logical files are added as data sources in
SKILL.md. 2. Boundary markers: The skill does not implement specific boundary markers to isolate instructions within analyzed data. 3. Capability inventory: The skill utilizes a variety of binary analysis and extraction tools includingautopsy,binwalk, andzstegacrossSKILL.mdandreferences/forensic-case-flow.md. 4. Sanitization: No specific sanitization procedures are mentioned for the content extracted from images before it is processed or searched.
Audit Metadata