Skills
Navigate
skills/autohandai/community-skills/analyzing-linux-elf-malware/Gen Agent Trust Hub

analyzing-linux-elf-malware

Fail

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: CRITICALCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/agent.py is vulnerable to command injection due to unsafe use of the subprocess module.
  • The functions extract_strings, check_packing, and analyze_dynamic_linking utilize subprocess.run with shell=True to execute utilities such as strings, upx, and readelf.
  • The filepath variable, which originates from the first command-line argument (sys.argv[1]), is interpolated directly into these shell command strings without any sanitization, escaping, or validation.
  • If an AI agent or user provides a malicious filename containing shell metacharacters (e.g., "; touch /tmp/pwned ;"), the script will execute the injected command with the privileges of the running process.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 16, 2026, 04:54 PM
Security Audit — agent-trust-hub — analyzing-linux-elf-malware