net-route-mapper
Warn
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a deobfuscation tool from an untrusted GitHub repository (kant2002/de4dot).
- [REMOTE_CODE_EXECUTION]: The analysis workflow involves downloading a remote zip archive containing executables and running them locally using the mono runtime.
- [COMMAND_EXECUTION]: The skill includes a Python script template that utilizes the subprocess module to execute shell commands and external binaries on files within the project directory.
- [PRIVILEGE_ESCALATION]: Reference documentation suggests using
sudo apt-get installto set up system-level dependencies like Mono, which requires elevated privileges. - [DYNAMIC_EXECUTION]: The skill generates and executes shell commands and Python scripts at runtime to invoke decompilation and deobfuscation tools on project binaries.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data (DLLs, source code) to extract metadata. Ingestion points: Project files including .dll, .exe, and .aspx files. Boundary markers: None identified in the skill instructions. Capability inventory: Subprocess execution of ilspycmd and de4dot, and local file writing. Sanitization: No filtering or validation of the ingested content is specified before processing.
Audit Metadata