incident-response-fileanalyser
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The installation script 'install.sh' requires root privileges to update the system and install security packages via 'apt-get' and 'pipx'.
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs various security-focused tools (e.g., 'flare-capa', 'floss', 'jadx', 'apktool') from official system and language package repositories during the setup process.
- [DATA_EXFILTRATION]: The analysis workflow involves sending file hashes and potentially entire malware samples to external reputation services like VirusTotal, MalwareBazaar, and ThreatFox for enrichment.
- [PROMPT_INJECTION]: As the skill processes untrusted files and extracts strings for analysis, there is an inherent surface for indirect prompt injection where malicious content within the analyzed files could attempt to influence the agent's logic.
- [COMMAND_EXECUTION]: The skill automates the execution of several static analysis tools and can generate temporary scripts for Ghidra headless analysis on potentially hostile artifacts.
Audit Metadata