analysis
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted strings and metadata from binaries, which serves as a surface for indirect prompt injection.
- Ingestion points: Data is pulled from binary files into SQL tables including 'strings', 'imports', and 'welcome' (SKILL.md).
- Boundary markers: There are no specific instructions to treat binary data with delimiters or separate it from control logic.
- Capability inventory: The skill utilizes 'Bash', 'Read', 'Glob', and 'Grep' for operational tasks (SKILL.md).
- Sanitization: No sanitization or validation of data from the binary is performed before it is processed by the agent.
Audit Metadata