deobf-indirect

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The documentation instructs the agent to execute included Python scripts to perform binary analysis and patching tasks.
  • [EXTERNAL_DOWNLOADS]: The scripts depend on standard third-party security libraries including angr, keystone-engine, pwntools, and capstone which must be present in the environment.
  • [DYNAMIC_EXECUTION]: The skill uses the angr framework for symbolic execution of binary code to determine branch targets and keystone to dynamically assemble ARM64 instructions for patching.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted binary files as input, which represents an ingestion point for external data that is then processed by the symbolic execution engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 05:57 PM