re-crypto-id
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloading the 'Detect It Easy' utility from GitHub and installing various system packages (binutils, frida-tools) using standard package managers like apt, brew, pacman, and pip. These are well-known tools in the security research community.
- [COMMAND_EXECUTION]: The instructions involve executing command-line utilities for binary inspection, including
strings,objdump,hexdump, and thefridainstrumentation framework. These commands are used to extract metadata, view hex data, and monitor process execution. - [DYNAMIC_EXECUTION]: The skill includes inline Python scripts executed via shell heredocs to perform runtime analysis of binary files, such as searching for cryptographic constants (AES S-boxes) and calculating Shannon entropy. It also provides templates for Frida hooks to dynamically intercept function calls.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted binary blobs and files, creating an attack surface for data-driven exploits.
- Ingestion points: Binary files (e.g., 'sample.bin') are read by Python scripts and processed by CLI analysis tools.
- Boundary markers: The skill does not define specific delimiters or instructions to isolate the raw binary data from the agent's reasoning context.
- Capability inventory: The environment includes Python execution, local file system access, and dynamic process instrumentation capabilities.
- Sanitization: The skill processes raw bytes for entropy and pattern matching without performing sanitization or validation of the binary input.
Audit Metadata