skills/dslsdzc/rev-skills/re-cracking/Gen Agent Trust Hub

re-cracking

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for modifying the system hosts file and using proxies to redirect network traffic to local or alternative servers, which is used to bypass online activation and license verification checks.
  • [DYNAMIC_EXECUTION]: The workflow involves advanced runtime manipulation techniques, including binary patching (e.g., overwriting instructions with nop or modifying jump conditions like jz to jnz) and DLL injection using frida-gadget.dll via a custom loader.exe to intercept process execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary samples and external configuration files (e.g., SSSSSPRO.json), which serves as a vector for indirect prompt injection where malicious data could influence agent behavior.
  • Ingestion points: Software binaries (PE, ELF, Macho) and their associated metadata are ingested into the analysis workflow defined in SKILL.md.
  • Boundary markers: The skill includes an "Allowed Scenarios" disclaimer, but lacks technical boundaries or delimiters to separate untrusted binary data from the agent's instructional logic.
  • Capability inventory: The skill leverages powerful tools for binary-patching, dynamic instrumentation (Frida, GDB, x64dbg), and system configuration modification.
  • Sanitization: No explicit sanitization, validation, or sandboxing requirements for binary samples or external URLs/configuration files are specified in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:09 AM