ida-domain-scripting
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
setup.pyscript clones theida-domainrepository from the author's official GitHub account (https://github.com/HexRaysSA/ida-domain.git) to set up the necessary environment. - [COMMAND_EXECUTION]: The
run.pyscript executes Python-based analysis code generated by the agent. It writes the code to a temporary file in/tmpand runs it using theuvpackage manager. - [COMMAND_EXECUTION]:
setup.pyandrun.pyutilize standard developer tools includinggitanduvto manage dependencies and execute tasks viasubprocess.run. - [PROMPT_INJECTION]: The skill processes external binaries for analysis, which represents a surface for indirect prompt injection if binary metadata or strings influence the agent's script generation.
- Ingestion points: Target binary files provided to the
-fargument inrun.py. - Boundary markers: None explicitly used in the prompt construction for binary analysis.
- Capability inventory: Full Python execution via
run.pyand environment management viasetup.py. - Sanitization: No specific filtering of binary content is performed before processing.
- [SAFE]: The automated scanner alert regarding
curl ... | shwas found to be a false positive. The string appears within aprint()statement insetup.pyas a helpful instruction for users to manually install theuvtool if it is missing.
Audit Metadata