ctf-pwn
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's methodology involves analyzing untrusted binary files and strings, which serves as a potential ingestion point for malicious instructions.
- Ingestion points: The agent reads target binaries and their metadata (symbol names, strings) through tool calls such as get-decompilation and get-strings (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when the agent processes strings or code snippets from analyzed binaries.
- Capability inventory: The agent utilizes a comprehensive reverse engineering toolset and is instructed to plan and test exploits, potentially involving code execution on the host or target system (SKILL.md).
- Sanitization: No sanitization or validation of data extracted from analyzed binaries is mentioned prior to the agent processing it for reasoning or tool input.
Audit Metadata