re-format-elf
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using standard system utilities such as readelf, objdump, and patchelf to inspect and modify ELF files.
- Evidence: SKILL.md contains numerous examples of command-line usage for binary analysis, such as 'readelf -h', 'objdump -d', and 'patchelf --version'.
- Context: These tools are used within their intended scope for software analysis and reverse engineering.
- [INDIRECT_PROMPT_INJECTION]: The skill involves analyzing untrusted ELF binaries, which represents a potential attack surface for indirect prompt injection if data extracted from the files is processed by an LLM without sanitization.
- Ingestion points: Instruction to analyze user-provided ELF files in SKILL.md.
- Boundary markers: The documentation does not specify the use of delimiters when handling data from binaries.
- Capability inventory: Provides tools and scripts for file inspection, including header parsing and symbol recovery.
- Sanitization: No specific sanitization procedures are mentioned for the output of analysis tools before presentation to the agent.
- [DYNAMIC_EXECUTION]: The skill includes a Python script template for parsing ELF headers at runtime.
- Evidence: references/examples.md provides a Python script utilizing the built-in struct module to unpack ELF header fields.
- Context: The script is a straightforward implementation of binary parsing and does not execute untrusted code or perform dangerous operations.
Audit Metadata