ctf-forensics
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill outlines a process for analyzing untrusted external artifacts such as logs, network captures (pcaps), and documents. These sources can contain malicious instructions intended to mislead or manipulate the AI agent's analysis (Indirect Prompt Injection).
- Ingestion points: Processes archives, disk images, pcaps, documents, images, audio, logs, and memory artifacts as defined in the 'What I do' section.
- Boundary markers: No explicit instructions are provided to the agent to ignore or delimit embedded instructions within the artifacts.
- Capability inventory: The skill describes manual extraction and triage steps (e.g., using binwalk, exiftool) but does not provide scripts to automate these.
- Sanitization: No sanitization or validation logic is defined for the content extracted from artifacts.
- [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It does not include any scripts, configuration files for automated execution, or package dependencies.
Audit Metadata