indirect-syscall-dev
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The test script in scripts/tests/test_pdata_ssn_resolve.py uses the subprocess module to validate the resolver's CLI output, which is standard testing behavior.
- [DYNAMIC_EXECUTION]: The skill implements logic for runtime resolution and execution of Windows system calls. These techniques are described as research into EDR evasion and indirect dispatch methods.
- [EXTERNAL_DOWNLOADS]: The documentation provides links to several public GitHub repositories containing research on syscall gates and evasion strategies, serving as technical references for the user.
Audit Metadata