re-crypto-id

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references downloading the 'Detect It Easy' utility from GitHub and installing various system packages (binutils, frida-tools) using standard package managers like apt, brew, pacman, and pip. These are well-known tools in the security research community.
  • [COMMAND_EXECUTION]: The instructions involve executing command-line utilities for binary inspection, including strings, objdump, hexdump, and the frida instrumentation framework. These commands are used to extract metadata, view hex data, and monitor process execution.
  • [DYNAMIC_EXECUTION]: The skill includes inline Python scripts executed via shell heredocs to perform runtime analysis of binary files, such as searching for cryptographic constants (AES S-boxes) and calculating Shannon entropy. It also provides templates for Frida hooks to dynamically intercept function calls.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted binary blobs and files, creating an attack surface for data-driven exploits.
  • Ingestion points: Binary files (e.g., 'sample.bin') are read by Python scripts and processed by CLI analysis tools.
  • Boundary markers: The skill does not define specific delimiters or instructions to isolate the raw binary data from the agent's reasoning context.
  • Capability inventory: The environment includes Python execution, local file system access, and dynamic process instrumentation capabilities.
  • Sanitization: The skill processes raw bytes for entropy and pattern matching without performing sanitization or validation of the binary input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 05:23 PM