disk-forensics
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data from forensic disk images and memory captures.
- Ingestion points: Disk images and recovered file content accessed through commands such as
icat,strings, andbulk_extractor(SKILL.md). - Boundary markers: The skill explicitly instructs the agent to perform an 'Authorization Check' and verify 'Privacy scope' before proceeding with analysis.
- Capability inventory: The skill utilizes the Bash tool to execute system-level forensic utilities including The Sleuth Kit, binwalk, and foremost.
- Sanitization: The provided methodology does not describe specific sanitization or escaping of data recovered from forensic images before it is processed or summarized in reports.
Audit Metadata