dnspy
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a technical reference and procedural guide for using dnSpy, a reputable open-source .NET assembly editor and decompiler.
- [SAFE]: All referenced external tools, such as
dnSpyExandde4dot, are well-known, established utilities within the cybersecurity and reverse engineering communities. - [SAFE]: Instructional code snippets (Python for PE header inspection and C# for manual string decryption via reflection) are provided for common security research tasks. These are intended for user-controlled execution as part of a manual analysis workflow.
- [SAFE]: The skill provides detailed patterns and indicators of compromise (IOCs) for several well-known .NET malware families (e.g., RedLine, AsyncRAT, QuasarRAT), which is consistent with its stated purpose of assisting in malware analysis.
- [SAFE]: Tool installation commands (
dotnet tool install) target recognized utilities on official registries.
Audit Metadata