re-format-pe
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard security and development tools such as
pefilevia pip,binutilsvia system package managers (apt, dnf, pacman, brew), andcff-explorervia Chocolatey. These are well-known and official software distribution channels. - [COMMAND_EXECUTION]: The skill contains several shell commands (
objdump,grep,head) and Python code snippets intended for local execution to inspect binary files. These commands are typical for reverse engineering tasks and are used to extract metadata from PE headers and sections. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted data in the form of PE binary files. It includes defensive analysis techniques, specifically warning the user about malicious techniques like TLS callback hijacking and import table manipulation that attackers use to hide code execution. The severity is low as this is the primary purpose of a forensic analysis skill.
Audit Metadata