re-source
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a standard workflow for binary analysis and documentation using specialized SQL tools. All operations are confined to the analysis environment.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests and processes untrusted data from compiled binaries.
- Ingestion points: Untrusted data enters via function names, strings, and decompiled pseudocode accessed through the
decompile()function andctreetables (referenced inSKILL.mdandreferences/struct-recovery-patterns.md). - Boundary markers: None identified; external binary data is interpolated directly into the analysis context.
- Capability inventory: The skill uses the
Bashtool and performs database mutations (UPDATE,INSERT) as part of the core reverse engineering workflow. - Sanitization: No explicit sanitization or validation of data extracted from the binary is documented, which is standard for analysis tools but noteworthy as a risk factor.
Audit Metadata