decompiler

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the r2ghidra plugin using the r2pm package manager (e.g., r2pm -ci r2ghidra). This is a standard procedure for expanding functionality within the radare2 ecosystem.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform decompiler plugin installation and potentially interact with the r2xsql environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes pseudocode generated from external binary files, creating a surface for potential indirect prompt injection attacks.
  • Ingestion points: The text column of the pseudocode table described in SKILL.md receives data directly from the binary analysis process.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the output of the decompiler queries.
  • Capability inventory: The skill is granted access to Bash and Read tools via the YAML frontmatter.
  • Sanitization: There is no evidence of sanitization, filtering, or validation of the pseudocode text before it is presented to the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 07:16 PM