debugging
Fail
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
sudofor high-privilege system modifications. This includes disabling Address Space Layout Randomization (ASLR) on Linux viaecho 0 | sudo tee /proc/sys/kernel/randomize_va_spaceand modifying the macOS system keychain to trust external certificates usingsudo security add-trusted-cert. - [COMMAND_EXECUTION]: Extensive use of shell commands for process management and environment cleanup, including
pkill,rm,lsof, andgit checkout. It also uses powerful tracing tools likestrace,ltrace, anddtruss(viasudo). - [EXTERNAL_DOWNLOADS]: The skill directs the agent to download and install multiple external packages and tools from public registries and repositories, such as
pwntools,playwright,ghidra,pyinstxtractor.py, andmitmproxy. - [REMOTE_CODE_EXECUTION]: Dynamically generates and executes Python scripts (e.g.,
extract_bundled_js.py) to carve and extract data from binary files at runtime. It also recommends running potentially untrusted binaries under debuggers likegdbandlldb. - [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted binary data and code, creating a surface for indirect prompt injection. While the methodology includes some verification steps, the high-capability environment (access to shell, network, and file system) increases the risk of exploitation if instructions are embedded in analyzed artifacts.
Recommendations
- AI detected serious security threats
Audit Metadata