dwarf-expert
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to use the
Bashtool to execute binary analysis utilities such asdwarfdump,llvm-dwarfdump, andreadelf. This involves executing shell commands on binary files that may originate from untrusted sources. - [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection. It ingests and parses DWARF/ELF binary data, which could contain attacker-controlled strings (e.g., in debug symbols or string tables) designed to manipulate the agent's logic when it processes the tool output.
- Ingestion points: Binary files (ELF/DWARF) parsed via
dwarfdump,readelf, and custom scripts. - Boundary markers: Absent; there are no instructions to the agent to ignore or delimit potentially malicious instructions found within the binary metadata.
- Capability inventory: The agent has access to
Bashfor command execution and the ability to write and run Python scripts. - Sanitization: No sanitization or validation of the binary content or the resulting tool output is specified.
Audit Metadata