data
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external binary files by extracting string literals and raw byte data. This creates an inherent attack surface where data within an analyzed binary could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data is ingested from the
strings,bytes, andbyte_searchtables inSKILL.md, which read directly from the binary being analyzed. - Boundary markers: The skill does not implement explicit delimiters or boundary markers when interpolating string content into the agent's context.
- Capability inventory: The skill allows access to
Bash,Read,Glob, andGreptools to facilitate file and system interaction. - Sanitization: There is no evidence of sanitization or filtering of the extracted string content to prevent the agent from interpreting it as instructions.
Audit Metadata