binwalk
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
binwalkutility through official and well-known package repositories including APT, Homebrew, DNF, Pacman, and APK. - [COMMAND_EXECUTION]: Provides shell and PowerShell scripts (
scripts/install.sh,scripts/install.ps1) to automate tool setup using standard system commands and package management utilities. - [COMMAND_EXECUTION]: Defines clear workflows for executing local analysis tools such as
binwalk,file,strings, andxxdto inspect binary files. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted binary files. 1. Ingestion points: Untrusted firmware or binary images in
SKILL.md. 2. Boundary markers: Lacks explicit 'ignore embedded instructions' markers for tool output. 3. Capability inventory: Tool supports filesystem extraction and has access to system commands via installation scripts (scripts/install.sh,scripts/install.ps1). 4. Sanitization: Output frombinwalksignatures is not sanitized before agent processing.
Audit Metadata