ida-reverse

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses PowerShell scripts (scripts/start.ps1, scripts/open.ps1) to manage local processes and file operations. These scripts use standard commands like taskkill, Start-Process, and Copy-Item to manage the IDA MCP server and handle binary files. These are documented behaviors essential for the skill's reverse engineering purpose.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and install the ida-pro-mcp tool from a public GitHub repository (github.com/mrexodia/ida-pro-mcp.git). This is a well-known community tool in the reverse engineering space. The start.ps1 script also includes logic to trigger an automatic bootstrap if the tool is missing.
  • [SAFE]: The skill requests access to potentially sensitive system directories (like System32) but implements a safety measure by copying target files to a temporary directory before analysis to avoid permission issues and direct system modification.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 03:58 AM
Security Audit — agent-trust-hub — ida-reverse