reverse-eng-patch-diff
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches BinDiff from Google's official GitHub repository.
- [EXTERNAL_DOWNLOADS]: Downloads utility scripts from the official Linux kernel repository on GitHub.
- [EXTERNAL_DOWNLOADS]: Retrieves security metadata from Microsoft's MSRC API and symbol files from Microsoft's official symbol server.
- [COMMAND_EXECUTION]: Provides instructions for installing tools via package managers (pip, dpkg, dnf) and executing binary analysis engines such as ghidriff, bindiff, and radiff2.
- [INDIRECT_PROMPT_INJECTION]: The skill suggests feeding tool outputs, including pseudocode diffs and JSON reports, to an LLM for automated root-cause analysis.
- Ingestion points: diff_out/, bindiff_out/, and msrc.json (specified in cheatsheet.md and SKILL.md).
- Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Shell command execution, package installation, and network downloads (specified in cheatsheet.md and SKILL.md).
- Sanitization: No specific sanitization or validation of the external binary or report data is mentioned.
Audit Metadata