stack-overflow-and-rop
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for binary exploitation. The methodologies described (ret2libc, SROP, BROP, etc.) and the tools referenced (pwntools, ROPgadget, ropper) are industry-standard for security research.
- [COMMAND_EXECUTION]: The skill suggests using various binary analysis tools such as checksec, ROPgadget, and ropper. These are executed via the command line as part of the intended workflow for analyzing binary files.
- [DYNAMIC_EXECUTION]: The skill includes Python code snippets that utilize the pwntools library to construct and execute exploitation chains. This behavior is the core functionality of the skill and does not target the agent's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill describes methods for the agent to ingest and analyze external binary files. While processing untrusted binaries carries inherent risks, the instructions provide a structured approach focused on technical analysis, and the capabilities involved (binary analysis tools) are necessary for the skill's stated purpose.
Audit Metadata