binary-analysis
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
binwalkviapiporcargo.binwalkis a widely recognized and well-known open-source tool used for firmware analysis and data extraction. - [COMMAND_EXECUTION]: The skill provides instructions for utilizing several standard binary analysis utilities, including
strings,objdump,readelf,nm,xxd, andhexdumpto inspect and manipulate file contents. - [PROMPT_INJECTION]: The skill is designed to process untrusted binary files, which creates a potential surface for indirect prompt injection.
- Ingestion points: Untrusted data is ingested from files via
strings,binwalk, andxxdinSKILL.md. - Boundary markers: The instructions do not define any delimiters or system-level warnings to distinguish between the processed file data and instructions for the agent.
- Capability inventory: The skill allows for significant file reading and
Bashcommand execution capabilities within the analysis workflows. - Sanitization: Output from the analysis tools, such as extracted strings or file metadata, is passed to the agent without sanitization to prevent the interpretation of embedded malicious instructions.
Audit Metadata