c2-bof-development

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references a download for the official beacon.h header file from the HelpSystems (Cobalt Strike) documentation portal. This is an expected and legitimate resource for BOF development.
  • [INDIRECT_PROMPT_INJECTION]: The included boflint.py script processes compiled COFF object files provided by the user to validate structure and symbols. The script uses safe binary parsing methods via the Python struct module and does not execute the data it reads.
  • [COMMAND_EXECUTION]: The documentation provides standard examples for compiling C code using system compilers (Visual Studio or MinGW) and executing the provided Python linter, which is consistent with the skill's primary purpose of code development.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:15 PM