reverse-engineering
Fail
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing various tools, including the use of remote script execution for GEF: 'curl -fsSL https://gef.blah.cat/sh | bash'. It also clones and builds the pycdc tool from source.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill analyzes untrusted binaries and scripts provided by users in 'SKILL.md' and 'dsl-vm-reverse/SKILL.md'.
- Boundary markers: Absent. The instructions do not specify markers to distinguish user instructions from data.
- Capability inventory: Utilizes powerful debugging and analysis tools (gdb, radare2, frida) capable of code execution.
- Sanitization: Absent. Untrusted code is processed and executed in analysis environments.
- [EXTERNAL_DOWNLOADS]: Automated scanners blacklisted the domain 'www.loldrivers.io' and flagged the internal file 'references/kernel-driver-reverse.md' as malicious. It also fetches reverse engineering libraries from standard package registries.
- [PRIVILEGE_ESCALATION]: Uses 'sudo' for tool installations and 'chmod 777' for managing binary permissions during analysis.
- [COMMAND_EXECUTION]: Executes shell commands to install dependencies via apt, brew, and pip.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata