malware-analysis-methodology
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands and Python scripts intended for execution to analyze binary files. These involve the use of standard analysis utilities such as
readelf,strace, and specialized libraries likepefileandpyelftoolsto extract metadata and behavioral signatures.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process untrusted external data (malware samples), creating an attack surface for indirect prompt injection.\n - Ingestion points: Malicious binary files (e.g., sample.bin, sample.exe) are ingested through hashing, string extraction, and header analysis in SKILL.md and reference files.\n
- Boundary markers: There are no explicit boundary markers or instructions to the agent to disregard potential instructions embedded within the analyzed data.\n
- Capability inventory: The skill uses system tools (readelf, nm, strace, ltrace, upx), file system access, and Python scripts capable of deep parsing of file structures.\n
- Sanitization: The skill lacks sanitization or validation of the binary input before processing it with diagnostic tools, relying on the tools' own parsing safety.
Audit Metadata