Skills
Navigate
skills/noorqureshi/security-skills/reverse-eng-ghidra/Gen Agent Trust Hub

reverse-eng-ghidra

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and adapts content from an external GitHub repository (github.com/zhaoxuya520/reverse-skill) belonging to an unverified user.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted external binary data (ELF, PE, firmware), which creates an attack surface where malicious metadata or code structures could influence agent behavior.
  • Ingestion points: Binary samples imported for analysis (e.g., sample.bin) and project scope files (scope.txt).
  • Boundary markers: The instructions lack specific delimiters or isolation protocols to separate binary analysis output from the agent's core instructions.
  • Capability inventory: The skill utilizes shell command execution via the analyzeHeadless utility and executes Ghidra scripts (Jython and PyGhidra).
  • Sanitization: There are no requirements for validating or sanitizing metadata or decompiled output retrieved from binary samples.
  • [COMMAND_EXECUTION]: The skill provides instructions for running shell commands using Ghidra's analyzeHeadless utility located in the installation's support/ directory for batch processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 10:31 AM