ctf-crypto

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several standard cryptographic libraries and well-known security tools. These include Python packages like pycryptodome and z3-solver from official registries, and external tools such as SageMath, Hashcat, and RsaCtfTool from their respective official repositories.
  • [COMMAND_EXECUTION]: Provides various bash commands for environment configuration and for running cryptanalysis scripts. These commands are routine for the skill's documented purpose of performing cryptographic research and CTF challenge solving.
  • [DATA_EXPOSURE]: The skill processes untrusted external data (such as ciphertexts and public keys) that may be obtained from CTF challenges. While this is the intended use case, it represents a surface for indirect prompt injection if the challenge data contains adversarial instructions.
  • Ingestion points: Challenge data, keys, and ciphertexts are ingested from local files or via the WebFetch tool.
  • Boundary markers: None; the skill does not include specific delimiters or instructions to ignore embedded commands in the data being analyzed.
  • Capability inventory: The skill has access to Bash, Write, Edit, and WebFetch, which are used to implement the cryptographic solvers and interact with challenge servers.
  • Sanitization: No specific sanitization or filtering is applied to the input data before it is processed by the provided scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 03:12 PM