radare2
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill describes an "On-Demand Bootstrap" system that automatically downloads and installs the Radare2 environment from the official GitHub releases if the tools are not detected on the host system.
- [EXTERNAL_DOWNLOADS]: Fetches software packages and toolchain binaries from the Radare2 GitHub repository (radareorg/radare2) to establish the necessary execution environment.
- [DYNAMIC_EXECUTION]: Prompts the agent to use the
r2pmplugin manager to dynamically install and load functional extensions such asr2ghidraorr2decduring runtime. - [COMMAND_EXECUTION]: Extensively utilizes PowerShell and the Radare2 suite of command-line tools to interact with the file system, perform binary reconnaissance, and conduct file patching.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is the analysis of untrusted binary data (such as EXE, DLL, or ELF files), which constitutes a potential attack surface where instructions embedded in file strings or metadata could attempt to influence the agent's logic.
- Ingestion points: Binary files processed through tools like
rabin2andr2. - Boundary markers: The skill mandates the use of specific "Evidence" identifiers (e.g., E-imports, E-exports) and checklists, which serve as structured manual verification steps for the agent.
- Capability inventory: Includes shell command execution (PowerShell), binary file modification (via write mode
r2 -w), and local network interaction (viar2http). - Sanitization: The provided documentation does not specify sanitization or escaping protocols for strings or data extracted from untrusted binaries.
Audit Metadata