reverse-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted binary files, creating an inherent attack surface for processing potentially malicious data.
- Ingestion points: The bundled
scripts/triage.pyreads user-provided binary files; the agent is instructed to extract and interpret strings, headers, and metadata from unknown executables. - Boundary markers:
SKILL.mdenforces a 'mandatory execution gate' requiring confirmation of a dedicated VM, snapshot restoration capabilities, and network isolation before proceeding with analysis. - Capability inventory: The skill utilizes shell execution, debugger control (GDB, x64dbg, radare2), and network capture tools within the defined analysis environment.
- Sanitization: The skill relies on strict environmental isolation (sandboxing/virtualization) rather than content sanitization, which is appropriate for the reverse engineering domain.
- [COMMAND_EXECUTION]: The skill instructs the agent to use various command-line tools for binary inspection and analysis, such as
file,strings,binwalk,readelf, andobjdump. - [PRIVILEGE_ESCALATION]: The references mention
sudofor specific tasks likechrootortcpdump, but these instructions are scoped explicitly to a verified, isolated analysis virtual machine to prevent host compromise.
Audit Metadata