r2http
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
curlto communicate with aradare2HTTP server, sending commands via the raw request body to the/cmdendpoint. This is a standard method for stateful interaction with the tool. - [COMMAND_EXECUTION]: The skill provides instructions for starting a
radare2server process locally using the shell, which involves common command-line flags for configuration (e.g.,r2 -N -e http.port=9393). - [SAFE]: The documentation mentions authentication (
curl -u user:pass), but it uses generic placeholders rather than hardcoding actual credentials. - [SAFE]: All network operations are directed at
127.0.0.1,localhost, or user-provided endpoints, which is consistent with the skill's purpose for local or intended remote binary analysis. No evidence of obfuscation or hidden malicious URLs was found.
Audit Metadata