headless-ghidra-intake
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a restricted set of ghidra-agent-cli commands for workspace management and binary inspection. These operations are scoped to the initialization phase.
- [DYNAMIC_EXECUTION]: The instructions explicitly forbid the creation or execution of arbitrary Ghidra scripts, requiring user confirmation for any capabilities not already present in the CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external binaries and archives. The risk of instructions embedded in binary metadata is mitigated by requirements for evidence-based analysis and the use of structured YAML artifacts for recording scope and state.
Audit Metadata