bof-dev
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile provides specific compilation commands using themingw-w64toolchain (e.g.,x86_64-w64-mingw32-gcc) to transform source code into object files. These are standard developer tools and used here in a legitimate instructional context. - [SAFE]: The provided header files (
beacon.h,beacon_compatibility.h) and C++ helper templates (bof_helpers.hpp) are consistent with established industry standards for developing Cobalt Strike compatible BOFs. The RAII wrappers provided inbof_helpers.hppfollow best practices for resource management in restricted runtime environments. - [SAFE]: Documentation in
references/dfr-strategies.mdandreferences/anti-patterns.mdcontains purely technical information regarding Dynamic Function Resolution (DFR) and memory management constraints specific to the COFF loading process.
Audit Metadata