hardware-ctf
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process and analyze untrusted external data such as firmware images, logic analyzer traces, and packet captures.
- Ingestion points: Artifact triage workflows in SKILL.md and references/hardware-artifact-workflow.md involving logic traces, firmware, and RF samples.
- Boundary markers: Instructions specify operating within authorized isolated lab environments and require making physical assumptions explicit before decoding.
- Capability inventory: The skill utilizes a wide range of analysis tools including ghidra, qemu, binwalk, and wireshark to inspect data.
- Sanitization: Emphasizes validation through reconstructing observables and recording all assumptions to ensure reproducible and verifiable results.
- [EXTERNAL_DOWNLOADS]: Includes a reference to official tutorials for the ChipWhisperer hardware security tool on GitHub, which is a recognized and trusted source in the field.
- [SAFE]: The skill focuses on instructional guidance for security researchers and CTF participants using legitimate open-source and commercial analysis tools.
Audit Metadata