rust-reverse-engineering

Warn

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/install-dep.sh script utilizes sudo to install system dependencies via package managers like apt, dnf, and pacman, which constitutes a privilege escalation vector.
  • [COMMAND_EXECUTION]: The scripts/install-dep.sh script modifies user shell configuration files (.zshrc, .bashrc, or .profile) to persistently add new tool paths to the PATH environment variable.
  • [EXTERNAL_DOWNLOADS]: The installer script fetches external software and libraries from official and well-known registries, including Homebrew, system package repositories, and Cargo.
  • [COMMAND_EXECUTION]: The skill scripts perform extensive execution of local system utilities (such as nm, readelf, and lipo) on user-provided binary files to extract metadata and symbols.
  • [COMMAND_EXECUTION]: The scripts/ghidra-job.sh script employs the nohup command to launch and manage analysis processes in the background, allowing them to persist beyond the current shell session.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 08:20 AM
Security Audit — agent-trust-hub — rust-reverse-engineering