headless-ghidra-intake
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access behaviors were detected. The skill maintains a clear focus on its intended reverse-engineering purpose using legitimate vendor tools.
- [COMMAND_EXECUTION]: The skill utilizes the
ghidra-agent-cliutility, which is a vendor-provided tool from ByteLandTechnology. Command execution is limited to workspace setup and binary metadata inspection. A safety constraint explicitly forbids the agent from creating or running new Ghidra scripts without user approval. - [PROMPT_INJECTION]: The skill defines an ingestion point for untrusted data in the form of user-provided binaries. This constitutes an indirect prompt injection surface.
- Ingestion points: Identified in
SKILL.mdas 'User-provided binary or archive path'. - Boundary markers: Present in
planning-brief.mdthrough 'Non-Negotiable Reverse-Engineering Constraints' and explicit 'Validation expectations'. - Capability inventory: Defined in
SKILL.mdas a subset ofghidra-agent-cliworkspace and inspection commands. - Sanitization: Not explicitly specified in the provided markdown instructions.
Audit Metadata