The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary data from suspicious Windows executables as part of its primary malware analysis function. While this constitutes an attack surface, the risk is mitigated by the fact that the analysis is static and does not involve executing the binary code or treating extracted strings as instructions.\n
Ingestion points: The scripts/agent.py script reads local binary files provided by the user.\n
Boundary markers: There are no explicit delimiters or warnings to ignore embedded instructions when processing the binary content.\n
Capability inventory: The skill has file read capabilities and the documentation suggests using curl to interact with external APIs.\n
Sanitization: The script uses standard string decoding with error handling to process binary data safely.\n- [EXTERNAL_DOWNLOADS]: The skill's documentation provides commands to query the VirusTotal API using a file's SHA-256 hash. This is a standard and safe practice for malware triage using a well-known security service.

performing-static-malware-analysis-with-pe-studio