binary-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The instructions in SKILL.md and evals/evals.json reinforce agent safety by requiring a clear separation between CLI-provided evidence and agent interpretations. It explicitly warns against obeying instructions found within analyzed binary samples, which mitigates indirect prompt injection risks.
- [COMMAND_EXECUTION]: Subprocess execution is used appropriately for management tasks such as checking dependency versions (e.g., java -version) and starting the local worker daemon. All paths are validated using a dedicated path security module, and no user-supplied data is passed to a shell environment.
- [EXTERNAL_DOWNLOADS]: The skill provides an automated bootstrap process for installing necessary dependencies like PyGhidra via pip. These downloads target official, well-known registries and are part of the documented toolchain initialization.
- [DATA_EXFILTRATION]: Analysis of file system and network operations confirms that the skill operates entirely locally. It implements strict path validation to prevent access to sensitive system directories (e.g., /etc/shadow) and contains no outbound networking calls or telemetry functions.
Audit Metadata