skills/mukul975/anthropic-cybersecurity-skills/analyzing-mft-for-deleted-file-recovery/Gen Agent Trust Hub
analyzing-mft-for-deleted-file-recovery
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The provided Python scripts (agent.py, process.py) are designed for local forensic analysis of MFT data. They utilize standard libraries and contain no network-enabled or malicious functions.
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to well-known forensic utilities like MFTECmd and RBCmd. These references point to established community repositories and are intended for manual use.
- [COMMAND_EXECUTION]: Example command-line workflows are included for investigative purposes. These involve standard system tools and do not represent automated or hidden execution risks.
- [PROMPT_INJECTION]: The skill processes untrusted file system metadata via agent.py and process.py. While it lacks explicit boundary markers, its capabilities are limited to local file read/write, and it performs standard UTF-16 decoding on filenames.
Audit Metadata