offensive-edr-evasion
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves ingesting and analyzing external source code, binaries, and configuration files to identify vulnerabilities. This processes untrusted data which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The workflow involves static code/binary inspection and runtime configuration verification as described in SKILL.md.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are defined in the workflow instructions to protect the agent from malicious code.
- Capability inventory: The skill utilizes REA MCP tools for disassembly, bundle recovery, and reporting, which grant it significant analytical power over the ingested data.
- Sanitization: No explicit sanitization or validation steps for external content are described in the auditing procedures.
Audit Metadata