cloversec-ctf-build-dockerizer
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
ttydbinary from its official GitHub repository (tsl0922/ttyd) during the Docker image build process for certain challenge profiles. GitHub is a well-known and trusted service. - [COMMAND_EXECUTION]: Several Python scripts (
render_component.py,render_scenario.py,validate_scenario.py) use thesubprocessmodule to execute other scripts within the same skill package. This is standard behavior for orchestrating the build and validation workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided CTF challenge directories and configuration files (
challenge.yaml). While this presents a theoretical attack surface, the skill implements strict validation rules (validate.sh) and uses safe interpolation methods (e.g.,shlex.quote) when generating scripts. - [SAFE]: Heuristic detections for reverse shells were triggered by legitimate health check commands using the
/dev/tcpdevice in Bash (e.g.,bash -lc 'echo > /dev/tcp/127.0.0.1/80'). These are standard diagnostic commands in containerized environments and do not represent a threat.
Audit Metadata