dwarf-debug-format
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using standard system utilities like
readelf,dwarfdump,llvm-dwarfdump,objcopy, andstripto inspect and manipulate ELF binary debug sections. - [EXTERNAL_DOWNLOADS]: The skill references official and well-known
debuginfodservers from organizations like Fedora, Ubuntu, Debian, and Elfutils for remote symbol resolution. These are established services for software development. - [COMMAND_EXECUTION]: Instructions include installing necessary debugging tools via standard package managers such as
apt-getandbrew. - [PROMPT_INJECTION]: The skill processes external binary files as input for analysis tools, creating an indirect prompt injection surface.
- Ingestion points: Binary files (
prog) processed in Workflow sections 1, 2, 4, and 7. - Boundary markers: No explicit delimiters or warnings used to wrap tool output.
- Capability inventory: Uses
readelf,dwarfdump,objcopy,strip,dwp, andgdbvia subprocess execution. - Sanitization: No sanitization of tool output is mentioned.
Audit Metadata