decompiler
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
r2ghidraplugin using ther2pmpackage manager (e.g.,r2pm -ci r2ghidra). This is a standard procedure for expanding functionality within the radare2 ecosystem. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform decompiler plugin installation and potentially interact with ther2xsqlenvironment. - [INDIRECT_PROMPT_INJECTION]: The skill processes pseudocode generated from external binary files, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: The
textcolumn of thepseudocodetable described inSKILL.mdreceives data directly from the binary analysis process. - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the output of the decompiler queries.
- Capability inventory: The skill is granted access to
BashandReadtools via the YAML frontmatter. - Sanitization: There is no evidence of sanitization, filtering, or validation of the pseudocode text before it is presented to the agent context.
Audit Metadata