macos-reverse
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for static and dynamic analysis of macOS binaries. Tools include system-native utilities such as
file,codesign,spctl,otool,nm, andlog, as well as third-party security tools likejtool2,lldb, andFrida. - [PROMPT_INJECTION]: The skill processes untrusted external data (Mach-O binaries, application bundles, and library dependencies) which can contain malicious metadata or embedded strings designed to influence agent behavior.
- Ingestion points: Binary files (Mach-O, dylib, framework), app bundles, and LaunchAgent/Daemon configuration files specified as
targetor./appinSKILL.mdandreferences/macho-triage.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are present when reading data from these sources.
- Capability inventory: The skill possesses extensive command execution capabilities via shell utilities and debugging tools like
lldbandFridaacross all analyzed files. - Sanitization: No explicit sanitization or validation of input data or tool output is documented.
Audit Metadata