reverse-eng-firmware
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a methodology guide and does not contain executable code, remote script downloads, or obfuscated payloads. All referenced tools (binwalk, Ghidra, emba) are well-known industry standards for security research.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing external firmware images, which constitutes an attack surface if the analysis tools are vulnerable to malformed binary data. This is a characteristic of the firmware analysis domain rather than a flaw in the skill itself.
- Ingestion points: Firmware images (.bin, .img) and flash dumps specified in the Method section of SKILL.md.
- Boundary markers: The skill includes a 'Gotchas' section advising on authorization and local file management, but no technical prompt delimiters.
- Capability inventory: Instructions for executing binwalk, unsquashfs, emba, and Ghidra to extract and analyze filesystems.
- Sanitization: No specific input sanitization is described; the process relies on the integrity of the underlying analysis tools.
Audit Metadata