console-physics
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs static analysis of user-provided ELF files. The code in
tune.pyuses only Python standard libraries and performs well-defined binary parsing and MIPS instruction decoding. - [OBFUSCATION]: A static analysis hint flagged potential obfuscation in
tune.py. However, manual review confirms that the flagged content consists of legitimate MIPS opcode mapping dictionaries (NAMES,WRITES_RT) required for binary disassembly. No malicious obfuscation or hidden payloads were found. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted binary data from user-specified ELF files. While this creates a theoretical ingestion surface, the tool's functionality is limited to reading data and printing structured technical information (hex addresses, assembly, and float values) to the console. It lacks the network or file-write capabilities required for a meaningful attack chain.
Audit Metadata