Perform cautious first-pass static malware analysis by identifying format, capabilities, embedded config clues, anti-analysis signs, and likely execution paths without overclaiming intent. Use when Codex inspects suspicious binaries or scripts.
