ctf-pwn
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install several industry-standard security tools including
pwntools,ROPgadget,ropper,one_gadget,seccomp-tools, and debuggers likegdbandpwndbg. These are fetched from well-known repositories such as PyPI, RubyGems, Homebrew, and official Linux package managers. - [COMMAND_EXECUTION]: The skill includes several Python scripts (
scripts/*.py) and complex shell one-liners designed to automate binary analysis and payload generation. These scripts are intended for analyzing target binaries in a research context and do not contain malicious instructions targeting the host environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted data sources, such as binary files and output from remote network services, which could potentially contain adversarial instructions. However, this risk is inherent to the primary purpose of binary exploitation research, and the skill does not contain instructions that increase this risk beyond the baseline for this domain.
Audit Metadata