judge-ctf
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill consists of Markdown-based instructions and metadata.
- [PROMPT_INJECTION]: The skill is designed to analyze data from potentially untrusted sources (CTF challenge logs and results). This represents a surface for indirect prompt injection, though it is inherent to the skill's purpose as a security analysis tool.
- Ingestion points: The skill evaluates 'agent output logs' and 'vulns.json' contents.
- Boundary markers: No explicit delimiters are suggested for the external content.
- Capability inventory: The instructions encourage the use of file system tools (find, grep), database queries, and network utilities (curl).
- Sanitization: No input validation or sanitization is specified for the processed logs.
Audit Metadata