analyzing-linux-elf-malware
Fail
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted Linux ELF binaries, creating a potential indirect prompt injection surface.
- Ingestion points: The
scripts/agent.pyscript and instructions inSKILL.mdprocess user-provided binary files to extract metadata and strings. - Boundary markers: No specific delimiters are used to isolate binary content from the agent's reasoning process.
- Capability inventory: The skill uses
subprocessto call system utilities and has file read access. - Sanitization: Binary content is inspected directly without sanitization, which is expected for forensic analysis but represents an inherent risk surface.
- [COMMAND_EXECUTION]: The script
scripts/agent.pyexecutes system tools likestrings,readelf, andupxviasubprocess.run(). While these are legitimate analysis actions using safe argument passing, they constitute a capability to interact with the underlying system based on the target binary path provided to the script. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
pyelftoolslibrary, which is a well-known Python package for ELF analysis. If not present, the documentation directs the user to install it viapip, the official Python package manager.
Recommendations
- CRITICAL: 1 infected file(s) detected - DO NOT USE
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata