re-console
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing reverse engineering tools using system package managers such as
apt,brew,pacman, anddnfacross different operating systems. - [EXTERNAL_DOWNLOADS]: The guide directs the user to fetch the
hactoolutility from a public GitHub repository and suggests downloading emulators from their official websites (mgba.io,fceux.com). These are recognized as standard community tools for the tasks described. - [DYNAMIC_EXECUTION]: Instructions are provided to compile the
hactoolutility from source usingmakeon Unix-like systems and to develop custom analysis scripts utilizing thepyelftoolsPython library. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and interpret external data from console binary containers and game ROMs, which presents a surface for indirect prompt injection attacks.
- Ingestion points: The agent is expected to analyze files such as
target.bin,main.nso, and various.gbaor.savfiles using specialized tools (SKILL.md). - Boundary markers: The skill lacks specific instructions or delimiters to isolate the content of analyzed files from the agent's internal instruction set.
- Capability inventory: The agent can execute file system and container analysis commands, which could be subverted if a processed file contains hidden instructions.
- Sanitization: No specific data sanitization or escaping mechanisms are described for the output generated by the analysis tools.
Audit Metadata