reverse-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading specialized tools from third-party sources, including the Il2CppDumper tool from a public GitHub repository and a customized QEMU fork from the Espressif organization for firmware emulation.
- [COMMAND_EXECUTION]: The skill documents the use of a wide range of powerful system and security utilities, such as GDB, Frida, strace, objdump, and radare2, including examples of script-driven automation and binary patching for analysis purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted data from binaries (ELF, PE, Mach-O), firmware dumps, and obfuscated bytecode. This represents a significant attack surface as the agent is instructed to extract and process strings and metadata which could theoretically contain adversarial prompts. However, this risk is inherent to the reverse engineering domain and the skill includes guidance on static analysis to minimize the need for direct execution.
Audit Metadata