re-cracking
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for modifying the system
hostsfile and using proxies to redirect network traffic to local or alternative servers, which is used to bypass online activation and license verification checks. - [DYNAMIC_EXECUTION]: The workflow involves advanced runtime manipulation techniques, including binary patching (e.g., overwriting instructions with
nopor modifying jump conditions likejztojnz) and DLL injection usingfrida-gadget.dllvia a customloader.exeto intercept process execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary samples and external configuration files (e.g.,
SSSSSPRO.json), which serves as a vector for indirect prompt injection where malicious data could influence agent behavior. - Ingestion points: Software binaries (PE, ELF, Macho) and their associated metadata are ingested into the analysis workflow defined in
SKILL.md. - Boundary markers: The skill includes an "Allowed Scenarios" disclaimer, but lacks technical boundaries or delimiters to separate untrusted binary data from the agent's instructional logic.
- Capability inventory: The skill leverages powerful tools for
binary-patching, dynamic instrumentation (Frida, GDB, x64dbg), and system configuration modification. - Sanitization: No explicit sanitization, validation, or sandboxing requirements for binary samples or external URLs/configuration files are specified in the instructions.
Audit Metadata