Skills
Navigate
skills/autohandai/community-skills/analyzing-mft-for-deleted-file-recovery/Gen Agent Trust Hub

analyzing-mft-for-deleted-file-recovery

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for local, offline digital forensics analysis. Its primary purpose is to help investigators recover deleted file metadata and detect timestomping in NTFS file systems.
  • [SAFE]: The Python scripts (scripts/agent.py and scripts/process.py) utilize standard Python libraries such as struct, csv, and json to parse binary and text data. There are no network operations, subprocess executions, or dynamic code evaluations.
  • [SAFE]: Technical documentation and workflows reference reputable industry tools like Eric Zimmerman's MFTECmd and SANS forensics resources. No suspicious URLs or external download chains were found.
  • [SAFE]: No patterns of prompt injection, obfuscation, or persistence mechanisms were identified in the instructions or the code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 04:55 PM
Security Audit — agent-trust-hub — analyzing-mft-for-deleted-file-recovery