ghidra-agent-cli
Warn
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The CLI tool automates external software by invoking system commands for Ghidra, Frida, Git, and various binary utilities such as nm, ar, and gcc. Evidence found in src/ghidra.rs and src/frida/device.rs.- [REMOTE_CODE_EXECUTION]: The tool contains a pipeline that generates C source code based on analysis results and compiles it for execution using gcc. This involves processing and running code derived from untrusted external binaries as seen in src/rebuild.rs. Furthermore, the tool's Java components in ghidra-scripts/ utilize dynamic class loading via URLClassLoader to execute bundled logic within the Ghidra environment.- [EXTERNAL_DOWNLOADS]: Fetches prebuilt tool binaries from the developer's official GitHub repository as part of its installation and update workflow documented in scripts/install-current-release.sh.
Audit Metadata