ghidra
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze native binaries, which are untrusted external inputs. This introduces a risk where malicious strings, symbols, or decompiled code within a sample could attempt to influence the agent's behavior.
- Ingestion points: Native binary samples (SKILL.md).
- Boundary markers: None specified in the instructions.
- Capability inventory: Accesses Ghidra via MCP bridge for decompilation, string extraction, and cross-reference analysis (SKILL.md).
- Sanitization: No explicit sanitization or instruction to ignore embedded commands is provided.
Audit Metadata