memory-forensics

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill installs the volatility3 package via pip and provides instructions for downloading official symbol tables from the Volatility Foundation's domain.
[PRIVILEGE_ESCALATION]: Employs sudo for memory acquisition tasks on Linux (such as dd if/dev/mem or insmod lime.ko), which is a necessary and standard requirement for accessing physical memory in a forensic context.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 26, 2026, 11:53 AM