skills/ljagiello/ctf-skills/ctf-pwn/Gen Agent Trust Hub

ctf-pwn

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install several industry-standard security tools including pwntools, ROPgadget, ropper, one_gadget, seccomp-tools, and debuggers like gdb and pwndbg. These are fetched from well-known repositories such as PyPI, RubyGems, Homebrew, and official Linux package managers.
  • [COMMAND_EXECUTION]: The skill includes several Python scripts (scripts/*.py) and complex shell one-liners designed to automate binary analysis and payload generation. These scripts are intended for analyzing target binaries in a research context and do not contain malicious instructions targeting the host environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted data sources, such as binary files and output from remote network services, which could potentially contain adversarial instructions. However, this risk is inherent to the primary purpose of binary exploitation research, and the skill does not contain instructions that increase this risk beyond the baseline for this domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 03:09 AM