reverse-eng-protocol
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the 'blackboxprotobuf' package from the standard Python package registry using pip to assist with protocol decoding.
- [COMMAND_EXECUTION]: The skill includes shell command templates for common security tools such as tshark and protoc, as well as a Python execution pattern using a heredoc (EOF) to run localized parsing logic.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external binary data from network capture files and message samples, which presents a data ingestion surface.
- Ingestion points: Analysis of 'cap.pcap' and 'msg.bin' files as described in SKILL.md and cheatsheet.md.
- Boundary markers: The skill does not provide specific delimiters or instructions to the agent to ignore potentially malicious embedded content within the analyzed traffic.
- Capability inventory: The skill uses shell commands (tshark, protoc) and Python scripts to process data.
- Sanitization: No explicit sanitization or validation of the input binary data is performed before analysis.
Audit Metadata