ghidra
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (LOW): The skill executes the
analyzeHeadlesstool and Java scripts via subprocess calls inghidra-analyze.sh. While this is the primary purpose of the skill, it involves local execution of tools and scripts on the host system. - PROMPT_INJECTION (LOW): Indirect prompt injection surface identified in the processing of untrusted binaries.
- Ingestion points: Binary files are passed to
ghidra-analyze.sh(e.g., via theBINARYargument). - Boundary markers: Absent. The skill does not use delimiters or boundary markers when presenting extracted data (strings, decompiled code) to the agent.
- Capability inventory: Subprocess calls to
analyzeHeadlessand Java scripts, along with file system read/write operations for logs and results. - Sanitization: Absent. There is no sanitization or escaping of the binary's contents before the resulting text is provided to the agent context.
Audit Metadata