binary-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary data and firmware images which may contain embedded instructions designed to influence agent behavior.\n
- Ingestion points: Binary files and firmware images read via
strings,binwalk, andhexdump(SKILL.md).\n - Boundary markers: None. The skill does not instruct the agent to distinguish between analysis output and commands.\n
- Capability inventory: Access to shell tools including
strings,binwalk,objdump, and others as defined inallowed-tools.\n - Sanitization: No sanitization is performed on the text extracted from binaries.\n- [COMMAND_EXECUTION]: The skill relies on shell command execution to perform analysis. While execution is scoped by the platform's
allowed-toolsconfiguration, the agent processes outputs from these tools which could potentially lead to command injection if filenames or directory structures within analyzed firmware are maliciously crafted.
Audit Metadata