binary-analysis

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing binwalk via pip or cargo. binwalk is a widely recognized and well-known open-source tool used for firmware analysis and data extraction.
  • [COMMAND_EXECUTION]: The skill provides instructions for utilizing several standard binary analysis utilities, including strings, objdump, readelf, nm, xxd, and hexdump to inspect and manipulate file contents.
  • [PROMPT_INJECTION]: The skill is designed to process untrusted binary files, which creates a potential surface for indirect prompt injection.
  • Ingestion points: Untrusted data is ingested from files via strings, binwalk, and xxd in SKILL.md.
  • Boundary markers: The instructions do not define any delimiters or system-level warnings to distinguish between the processed file data and instructions for the agent.
  • Capability inventory: The skill allows for significant file reading and Bash command execution capabilities within the analysis workflows.
  • Sanitization: Output from the analysis tools, such as extracted strings or file metadata, is passed to the agent without sanitization to prevent the interpretation of embedded malicious instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 03:49 PM