c2-bof-development
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a download for the official
beacon.hheader file from the HelpSystems (Cobalt Strike) documentation portal. This is an expected and legitimate resource for BOF development. - [INDIRECT_PROMPT_INJECTION]: The included
boflint.pyscript processes compiled COFF object files provided by the user to validate structure and symbols. The script uses safe binary parsing methods via the Pythonstructmodule and does not execute the data it reads. - [COMMAND_EXECUTION]: The documentation provides standard examples for compiling C code using system compilers (Visual Studio or MinGW) and executing the provided Python linter, which is consistent with the skill's primary purpose of code development.
Audit Metadata