re-variant
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Diaphora tool from its public GitHub repository.
- [COMMAND_EXECUTION]: Includes commands for installing binary analysis utilities such as rizin and radare2 via system package managers (apt, brew, pacman).
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted binary samples during diffing operations.
- Ingestion points: Binary samples provided by the user (sample_v1, sample_v2) as described in SKILL.md.
- Boundary markers: None explicitly defined in the provided command examples.
- Capability inventory: Uses subprocess calls to execute analysis tools like
rz-diffandreadelf. - Sanitization: No specific sanitization or filtering of tool output is mentioned before being processed by the agent.
Audit Metadata