re-fw-emulate
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system commands and package managers (apt, dnf, pacman, brew) to install necessary reverse engineering tools such as QEMU and GDB.
- [EXTERNAL_DOWNLOADS]: Mentions the firmadyne repository on GitHub for automated emulation. This is a well-known open-source framework in the firmware security research community.
- [DYNAMIC_EXECUTION]: The skill facilitates the execution of firmware binaries within QEMU. It explicitly mandates safety precautions including network isolation (-net none) and sandboxing to mitigate risks from untrusted code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external firmware binaries and rootfs contents which could technically contain malicious instructions.
- Ingestion points: rootfs files and binary paths (SKILL.md)
- Boundary markers: The skill repeatedly references isolation and sandboxing guidelines (e.g., [[re-analyze/platform-tips]])
- Capability inventory: QEMU emulation and GDB debugging commands
- Sanitization: Emphasizes environment isolation over content sanitization
Audit Metadata