r2http

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use curl to communicate with a radare2 HTTP server, sending commands via the raw request body to the /cmd endpoint. This is a standard method for stateful interaction with the tool.
  • [COMMAND_EXECUTION]: The skill provides instructions for starting a radare2 server process locally using the shell, which involves common command-line flags for configuration (e.g., r2 -N -e http.port=9393).
  • [SAFE]: The documentation mentions authentication (curl -u user:pass), but it uses generic placeholders rather than hardcoding actual credentials.
  • [SAFE]: All network operations are directed at 127.0.0.1, localhost, or user-provided endpoints, which is consistent with the skill's purpose for local or intended remote binary analysis. No evidence of obfuscation or hidden malicious URLs was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 02:43 AM