constant-time-analysis
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates cryptographic auditing by identifying secret-dependent branches and memory access patterns through static search and assembly inspection.
- [EXTERNAL_DOWNLOADS]: The workflow involves downloading source code for specialized analysis tools (ctgrind, dudect) from reputable public repositories for local compilation and use.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by ingesting external source code from a user-defined directory (TARGET_DIR) for auditing purposes. The agent remains safe as it is instructed to perform analysis rather than execute the untrusted content.
- Ingestion points: Cryptographic source code files located in the directory specified by TARGET_DIR (Workflow Steps 1-4).
- Boundary markers: Absent; the skill relies on ripgrep and compiler tools to process the content as raw data.
- Capability inventory: Shell command execution for searching (rg), disassembly (objdump), and dynamic profiling (valgrind).
- Sanitization: Not applicable, as content is analyzed as text and the skill does not autonomously execute the code being audited.
Audit Metadata