headless-ghidra-baseline
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted binary targets and configuration files which serves as a potential attack surface for indirect prompt injection.\n
- Ingestion points: Target binaries located in
targets/<target-id>/and pipeline configuration files (pipeline-state.yaml,scope.yaml).\n - Capability inventory: The skill uses
ghidra-agent-clito perform static analysis via Ghidra and dynamic instrumentation via Frida, including process attachment and I/O capturing.\n - Boundary markers: None explicitly specified for processed data.\n
- Sanitization: The skill relies on the internal validation of the
ghidra-agent-clitool and Ghidra's analysis engine.
Audit Metadata