offensive-keylogger-arch
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and configuration files for a security audit workflow. No malicious code, network exfiltration, or unauthorized command execution patterns were identified in the provided files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for the agent to ingest and analyze untrusted source code and binaries. 1. Ingestion points: Untrusted source code, binaries, and configuration files identified during the Surface & Architecture Inventory phase (SKILL.md). 2. Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore embedded instructions in the analyzed data. 3. Capability inventory: The skill utilizes static analysis tools, decompilers, and the REA universal orchestrator suite (SKILL.md). 4. Sanitization: No specific data sanitization or filtering steps are mentioned. This ingestion surface is a requirement for the skill's primary purpose of security auditing and does not escalate the verdict.
Audit Metadata