asm-verification-hallucination-gate
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
gccandobjdumpto verify assembly code. It further suggests running the compiled snippets or pre-linked programs and checking their exit codes to validate runtime behavior, such as stack offsets and operand ordering. - [DYNAMIC_EXECUTION]: The verification workflow involves creating assembly source files, compiling them at runtime, and executing the resulting binaries. This process is used to compare the actual machine code and execution results against the intended behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill processes assembly code that may be provided by external sources, such as AI-authored code in a pull request. The methodology of compiling and executing this untrusted code for verification purposes creates an attack surface where malicious assembly could be executed in the agent's environment. The skill lacks explicit sanitization or boundary markers for these inputs.
Audit Metadata