gdb-cli
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the
gdb-clipackage from PyPI or directly from a third-party GitHub repository (https://github.com/Cerdore/gdb-cli.git). The source repository and package are not from a verified or trusted organization. - [INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting and analyzing external, potentially untrusted data such as application binaries and core dumps.
- Ingestion points: Data is loaded into the agent's context through the
load --binaryandattach --pidcommands described inSKILL.md. - Boundary markers: The instructions include safety notes advising against GDB auto-loading and the evaluation of functions on untrusted data, which acts as a manual boundary but does not programmatically restrict the agent.
- Capability inventory: The skill provides commands like
eval-cmd,memory, andthread-applywhich allow the agent to inspect and execute logic based on the contents of the loaded data. - Sanitization: There is no evidence of automated sanitization or filtering of the binary or memory content before it is processed by the agent.
Audit Metadata