re-drm
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
protobuf(distributed by a well-known service) andpywidevine, which is a recognized community tool for Widevine L3 research. These are standard dependencies for the stated purpose of DRM analysis. - [COMMAND_EXECUTION]: The instructions utilize standard command-line utilities for forensic analysis, including
grep,readelf,tshark,ffprobe, andmp4dump. These tools are used appropriately within the context of security research and binary auditing. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data sources, which creates a theoretical surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent's context through media files (MP4/CMAF), PSSH box metadata, and network captures of license challenge/response traffic as described in
SKILL.md(Steps 2 and 3). - Boundary markers: The skill contains extensive warnings and scope limitations, repeatedly emphasizing that analysis must be conducted within "controlled environments" and strictly for "authorized research" purposes.
- Capability inventory: Analysis involves local file inspection via
grep, binary header auditing withreadelf, and media metadata extraction usingffprobeandmp4dump. - Sanitization: The skill employs structured binary parsing in its Python examples using the
structmodule, which reduces the risk of interpreting binary data as natural language instructions compared to raw text ingestion.
Audit Metadata