reverse-eng-deobfuscation
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and process external, untrusted code, such as packed binaries, obfuscated JavaScript, and WebAssembly modules. This creates an attack surface for indirect prompt injection, where instructions hidden within the target code could attempt to manipulate the agent's output or subsequent actions.
- Ingestion points: External files (binaries, .js, .wasm) provided to the agent for deobfuscation and analysis.
- Capability inventory: The skill describes the use of powerful analysis and instrumentation tools including
upx,ghidra,frida, andbox-js. - Boundary markers: The skill does not define specific prompt delimiters or instructions to separate untrusted code content from agent instructions during the analysis process.
- Sanitization: The methodology correctly includes security best practices by recommending the use of sandboxes (e.g.,
box-js) when executing unknown code to capture behavior.
Audit Metadata