re-format-pe

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard security and development tools such as pefile via pip, binutils via system package managers (apt, dnf, pacman, brew), and cff-explorer via Chocolatey. These are well-known and official software distribution channels.
  • [COMMAND_EXECUTION]: The skill contains several shell commands (objdump, grep, head) and Python code snippets intended for local execution to inspect binary files. These commands are typical for reverse engineering tasks and are used to extract metadata from PE headers and sections.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted data in the form of PE binary files. It includes defensive analysis techniques, specifically warning the user about malicious techniques like TLS callback hijacking and import table manipulation that attackers use to hide code execution. The severity is low as this is the primary purpose of a forensic analysis skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:03 AM