ailogic
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external C source code. While it outlines a rigorous manual analysis process, it does not specify the use of strict boundary markers or delimiters to isolate potentially malicious instructions embedded within code comments or string literals.
- Ingestion points: C source code files analyzed during the audit.
- Boundary markers: Not explicitly defined in the instructions.
- Capability inventory: File writing to 'ailogic-report.md' and execution of 'radare2' commands including the debugger ('ood').
- Sanitization: Relies on human-in-the-loop review as described in the steps, but lacks automated content sanitization for ingested code.
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard radare2 command-line utilities and interactive commands (e.g., 'aaa', 'pdf', 'ood', 'db') to analyze and debug binaries. These actions are appropriate for the skill's stated purpose of security auditing and logic bug detection within the radare2 project.
Audit Metadata