skills/mukul975/anthropic-cybersecurity-skills/parsing-artifacts-with-eric-zimmerman-tools/Gen Agent Trust Hub
parsing-artifacts-with-eric-zimmerman-tools
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The file
scripts/agent.pyusessubprocess.run()to execute Windows forensic tools such as MFTECmd.exe and PECmd.exe. The script constructs these commands using argument lists andos.path.join(), which is a standard and safe practice for wrapping command-line interfaces.\n- [EXTERNAL_DOWNLOADS]: The documentation inSKILL.mdandreferences/api-reference.mddirects users to download forensic tools from the official website and GitHub organization of Eric Zimmerman. These are industry-standard resources within the digital forensics domain.
Audit Metadata