symmetric-cipher-attacks
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical reference and toolbox for cryptanalysis. It provides detailed explanations and functional Python code for well-known symmetric cipher weaknesses.
- [SAFE]: No evidence of prompt injection, data exfiltration, or unauthorized command execution was found. The Python scripts are self-contained and perform mathematical operations or interact with user-defined oracle functions.
- [INDIRECT_PROMPT_INJECTION]: The skill provides scripts that ingest data from external sources (such as ciphertext from a target or responses from a padding oracle). While this constitutes an attack surface where an agent could process untrusted data, the scripts do not perform unsafe operations (like
eval()or subprocess execution) on this data. The risk is consistent with the skill's primary purpose of security analysis.
Audit Metadata