key-recovery-diagnosis
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external software from GitHub repositories. Specifically, it provides logic and instructions to clone the
btcrecoverrepository (https://github.com/3rdIteration/btcrecover.git) and recommends thehashcatrepository (https://github.com/hashcat/hashcat). - [COMMAND_EXECUTION]: The
scripts/agent.pyscript usessubprocess.runto execute local command-line tools, including Python-basedbtcrecoverand thehashcatbinary. This capability is gated by multiple configuration flags (technical_mode,allow_local_btcrecover, etc.) and strict validation that prevents arbitrary command injection or the use of inline secrets. - [EXTERNAL_DOWNLOADS]: The skill's installation instructions include running
pip installon a requirements file within a cloned repository, which involves downloading and installing third-party Python dependencies at runtime.
Audit Metadata