dwarf-expert
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool to executellvm-dwarfdumpandreadelfcommands. These are intended behaviors for analyzing binary files provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill involves parsing and analyzing DWARF metadata from external binary files. This creates a surface for indirect prompt injection, as a malicious binary could contain specially crafted debug information designed to influence the agent's output.
- Ingestion points: Binary files processed by analysis tools (
llvm-dwarfdump,dwarfdump,readelf) as described inSKILL.md. - Boundary markers: None present; the agent is instructed to read and interpret the output of these tools directly.
- Capability inventory: The skill utilizes
Bashfor command execution,Readfor file access, andWebSearchfor external information retrieval. - Sanitization: No specific sanitization or validation of the binary content is performed prior to parsing.
- [EXTERNAL_DOWNLOADS]: The skill references legitimate external technical resources, including the official DWARF standard (
dwarfstd.org) and thelibdwarfreference implementation on GitHub. These references are used for information retrieval and are consistent with the skill's stated purpose.
Audit Metadata