deobf-indirect
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation instructs the agent to execute included Python scripts to perform binary analysis and patching tasks.
- [EXTERNAL_DOWNLOADS]: The scripts depend on standard third-party security libraries including
angr,keystone-engine,pwntools, andcapstonewhich must be present in the environment. - [DYNAMIC_EXECUTION]: The skill uses the
angrframework for symbolic execution of binary code to determine branch targets andkeystoneto dynamically assemble ARM64 instructions for patching. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary files as input, which represents an ingestion point for external data that is then processed by the symbolic execution engine.
Audit Metadata