rev-symbol
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a GitHub repository (
https://github.com/P4nda0s/IDA-NO-MCP) to provide a plugin for exporting data from IDA Pro. As this resource is hosted under the skill author's account, it is considered a vendor-provided tool necessary for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data from decompiled C files and string tables, which creates a surface for indirect prompt injection.
- Ingestion points: Decompiled C code in the
decompile/directory,strings.txt,imports.txt, andexports.txt(SKILL.md). - Boundary markers: None identified in the skill instructions for the analyzed files.
- Capability inventory: The skill performs file system reads and utilizes web search tools for identifying constants and magic numbers (SKILL.md).
- Sanitization: No specific sanitization or validation of the input file content is mentioned.
Audit Metadata