re-crypto-keys
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary data (
sample.bin) and memory dumps (out) using tools likestrings,grep, and custom Python scripts. While this is necessary for malware analysis, a malicious binary could potentially exploit vulnerabilities in the processing tools or attempt to influence analysis results. - Ingestion points:
sample.bin(viastrings,objdump,7z), memory dumpout(via Python entropy/regex script). - Boundary markers: None present to delimit untrusted data from instructions.
- Capability inventory: File system access, shell command execution (
strings,gcore,objdump), and Python script execution. - Sanitization: No explicit input validation or sanitization is performed on the binary data before processing.
- [DYNAMIC_EXECUTION]: The skill provides Python code templates for calculating data entropy and searching for password patterns in memory dumps. These scripts are executed locally as part of the analysis process.
- [COMMAND_EXECUTION]: The skill utilizes several command-line utilities, including
strings,grep,gcore, andobjdump, to inspect and manipulate binary files and process memory.
Audit Metadata