re-ida
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the idat64 headless utility and other IDA-related command-line tools to perform binary analysis.
- [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and execute local Python scripts using the IDAPython API via the -S command-line argument.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary data, which presents a surface for indirect prompt injection. 1. Ingestion points: Binary samples imported into the IDA environment for analysis. 2. Boundary markers: The instructions do not define specific delimiters for separating untrusted binary strings from the agent's context. 3. Capability inventory: The skill utilizes command execution (idat64), file writing (logs and scripts), and the full IDAPython API. 4. Sanitization: The documentation explicitly advises performing dynamic debugging within a sandbox environment.
- [EXTERNAL_DOWNLOADS]: Mentions downloading software from hex-rays.com, the official vendor for IDA, and supports package installation via the Chocolatey (choco) manager.
Audit Metadata