pentest-gemini-sub-htb
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to perform exploitation and establish remote access via reverse shells, which involves executing arbitrary commands. The skill also explicitly permits the agent to modify the system's /etc/hosts file.
- [PRIVILEGE_ESCALATION]: The workflow includes a dedicated phase for performing internal enumeration and escalating privileges to gain administrative or root control on targets.
- [PERSISTENCE]: The skill defines a phase for establishing and stabilizing remote access, which is a key component of maintaining persistence on a target system.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to manipulate the agent.
- Ingestion points: The skill processes target challenge files and content from challenge URLs as specified in the 'Required Inputs' section of SKILL.md.
- Boundary markers: The instructions do not define delimiters or provide instructions to ignore commands embedded within the external target data.
- Capability inventory: The agent is granted broad authority to perform network operations, exploitation, and system-level configuration changes.
- Sanitization: There are no instructions provided for sanitizing or validating the content of external inputs before they are processed.
Audit Metadata