re-source

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill outlines a standard workflow for binary analysis and documentation using specialized SQL tools. All operations are confined to the analysis environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests and processes untrusted data from compiled binaries.
  • Ingestion points: Untrusted data enters via function names, strings, and decompiled pseudocode accessed through the decompile() function and ctree tables (referenced in SKILL.md and references/struct-recovery-patterns.md).
  • Boundary markers: None identified; external binary data is interpolated directly into the analysis context.
  • Capability inventory: The skill uses the Bash tool and performs database mutations (UPDATE, INSERT) as part of the core reverse engineering workflow.
  • Sanitization: No explicit sanitization or validation of data extracted from the binary is documented, which is standard for analysis tools but noteworthy as a risk factor.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 03:25 AM
Security Audit — agent-trust-hub — re-source