performing-dynamic-analysis-with-any-run

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill communicates with ANY.RUN's official API at api.any.run and utilizes the official anyrun-sdk for automated analysis. These are recognized services for behavioral malware analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted data (malicious files and URLs) for analysis purposes.\n
  • Ingestion points: filepath and url parameters in scripts/agent.py.\n
  • Boundary markers: The execution of untrusted content is confined to the ANY.RUN cloud sandbox.\n
  • Capability inventory: Reading local files for upload and performing network requests to the sandbox API.\n
  • Sanitization: The skill analyzes samples in their raw state to ensure behavioral accuracy. It explicitly advises users in SKILL.md to avoid uploading sensitive samples to public cloud instances.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:57 PM