rev-u3d-dump
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download reverse engineering tools from GitHub, specifically referencing the roytu/Il2CppDumper fork and the SamboyCoding/Cpp2IL project. GitHub is a well-known hosting service, and these tools are recognized within the game modding and security research communities for Unity analysis.
- [COMMAND_EXECUTION]: The documented workflow includes manual shell commands for unzipping application packages (IPA/APK), inspecting binary headers via xxd, and building/running the dumper using the .NET CLI (dotnet build/run). These commands are transparently presented as part of the intended reverse engineering process.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a process that ingests untrusted data from compiled binary and metadata files. Ingestion points: Binary files (libil2cpp.so) and metadata (global-metadata.dat) extracted from mobile application packages. Boundary markers: The skill explicitly guides the user to verify magic bytes and version numbers using hex inspection before processing, which serves as a validation boundary. Capability inventory: The workflow involves file extraction, repository cloning, and local code compilation. Sanitization: Verification of the metadata version (e.g., v39) ensures compatibility and reduces the risk of processing malformed or malicious binary data.
Audit Metadata