ctf-ai-ml

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
llm-attacks.md

This code is clearly offensive CTF material: it constructs and sends many LLM-attack payloads (prompt injection, jailbreaks, token-smuggling via zero-width chars, context exhaustion, and tool-use exploitation attempts) to a chat API endpoint and prints responses while searching for flags. It does not directly execute system commands or read local secrets itself, but it strongly aims to coerce a remote LLM/agent into privileged actions. As a supply-chain dependency, it would be highly suspicious if used outside a controlled CTF setting; however, within the fragment shown it is not implementing malware locally—its threat is inducing harmful behavior on the target service.

Confidence: 80%Severity: 55%
Audit Metadata
Analyzed At
Apr 17, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/ljagiello%2Fctf-skills%2Fctf-ai-ml%2F@2fe15ba39775e7250c6e2c05d151af4505ad2ffc