offensive-exploit-development
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for the agent to analyze external software, infrastructure, and binaries for memory corruption vulnerabilities, creating a surface for indirect instructions.
- Ingestion points: As described in
SKILL.md, the agent processes source code, binaries, and configurations during the 'Surface & Architecture Inventory' and 'Hypothesis & Vulnerability Verification' phases. - Boundary markers: The instructions do not provide explicit delimiters or boundary markers to isolate the agent's instructions from the untrusted content being audited.
- Capability inventory: The skill instructions mention integration with binary analysis and orchestration tools (
rea-binary-disassembly,rea-universal-orchestrator), though the skill itself does not define direct shell or network execution capabilities. - Sanitization: There are no instructions for sanitizing or escaping the content retrieved from the audited targets before processing.
- [NO_CODE]: The skill contains instructional markdown and configuration metadata only. It does not include executable scripts, shell commands, or automated network operations that could be used for malicious purposes.
Audit Metadata