ctf-crypto
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several standard cryptographic libraries and well-known security tools. These include Python packages like pycryptodome and z3-solver from official registries, and external tools such as SageMath, Hashcat, and RsaCtfTool from their respective official repositories.
- [COMMAND_EXECUTION]: Provides various bash commands for environment configuration and for running cryptanalysis scripts. These commands are routine for the skill's documented purpose of performing cryptographic research and CTF challenge solving.
- [DATA_EXPOSURE]: The skill processes untrusted external data (such as ciphertexts and public keys) that may be obtained from CTF challenges. While this is the intended use case, it represents a surface for indirect prompt injection if the challenge data contains adversarial instructions.
- Ingestion points: Challenge data, keys, and ciphertexts are ingested from local files or via the
WebFetchtool. - Boundary markers: None; the skill does not include specific delimiters or instructions to ignore embedded commands in the data being analyzed.
- Capability inventory: The skill has access to
Bash,Write,Edit, andWebFetch, which are used to implement the cryptographic solvers and interact with challenge servers. - Sanitization: No specific sanitization or filtering is applied to the input data before it is processed by the provided scripts.
Audit Metadata