ida-domain-api
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the
ida_domainPython library for reverse engineering tasks. All external references point tohex-rays.com, the official domain for the tool's vendor. - [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The skill includes a security-conscious recommendation to disable Lumina (a remote metadata service) by redirecting its host to
0.0.0.0to prevent unintended network lookups during analysis. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted binary files for analysis, which represents a potential injection surface if an attacker embeds malicious instructions in binary metadata or strings.
- Ingestion points: The skill ingests data via
Database.open()inSKILL.mdwhen loading executable files or databases. - Boundary markers: No explicit instruction delimiters or "ignore instructions" warnings are present in the provided code snippets.
- Capability inventory: The skill utilizes file system access to read binaries and write cached database files (
.i64) as seen in theresolve_databasefunction inSKILL.md. - Sanitization: No specific sanitization or filtering of binary content is demonstrated, as the primary purpose is raw analysis.
Audit Metadata