binary-re-tool-setup
Fail
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to execute a shell script directly from a remote URL (https://gef.blah.cat/sh) using curl piped to bash. This pattern allows for arbitrary command execution from an untrusted third-party domain without integrity verification.
- [PRIVILEGE_ESCALATION]: Recommends running Docker containers with the --privileged flag to register binfmt handlers, which grants the container broad access to the host kernel and devices.
- [PRIVILEGE_ESCALATION]: Numerous instructions utilize sudo to perform package installations and system configuration changes (e.g., sudo apt install, sudo pacman -S, sudo tee -a /etc/wsl.conf).
- [PERSISTENCE]: Instructions include persistently modifying shell startup files (~/.bashrc,
/.zshrc) and the GDB debugger configuration file (/.gdbinit) to automatically source external scripts or environment variables. - [COMMAND_EXECUTION]: The skill provides numerous shell and PowerShell commands for environment setup and tool verification on the host system.
- [EXTERNAL_DOWNLOADS]: Clones the YARA source code from the official VirusTotal GitHub repository.
- [EXTERNAL_DOWNLOADS]: Downloads Ghidra from the official ghidra-sre.org website.
- [EXTERNAL_DOWNLOADS]: Clones extensions from an unverified GitHub repository (hugsy/gef-extras) and uses various package managers (pip, r2pm, brew) to download tools without pinned versions.
Recommendations
- HIGH: Downloads and executes remote code from: https://gef.blah.cat/sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata