web-ctf
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from web applications, APIs, and client-side artifacts during CTF tasks, creating a potential surface for indirect prompt injection if target content contains malicious instructions for the agent.
- Ingestion points: Processes HTTP responses, HTML, JavaScript bundles, API data (REST/GraphQL), and metadata from target web servers as described in
SKILL.mdand the browser attack references. - Boundary markers: No explicit instruction delimiters or "ignore embedded instructions" warnings are provided in the instructions to help the agent distinguish between target data and its own operational guidelines.
- Capability inventory: The skill enables the agent to use various security tools (e.g.,
sqlmap,nuclei,zap,ffuf,curl) which perform network requests and subprocess execution. - Sanitization: No specific sanitization or filtering logic is prescribed for the agent to apply to ingested target data before processing it as part of its reasoning loop.
Audit Metadata