analyzing-go-binaries
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various system commands and security tools (
go,strings,GoReSym,redress,jq,rg) on a provided binary file. While these tools are standard for reverse engineering, they involve executing logic against untrusted file content supplied by a user. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection. A malicious Go binary could contain crafted symbols, function names, or metadata designed to override agent behavior when extracted and presented to the agent during the analysis process.
- Ingestion points: The binary 'target' file analyzed in
SKILL.md. - Boundary markers: Absent; the instructions do not specify delimiters or warnings to ignore embedded content within tool outputs.
- Capability inventory: Use of
go,strings,GoReSym,redress,jq, andrgfor file processing throughout the skill. - Sanitization: Absent; output from extraction tools is used directly in the analysis context.
Audit Metadata