bluehammer-vulnerability-poc
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches source code from a third-party GitHub repository at
https://github.com/Nightmare-Eclipse/BlueHammer.git. - [REMOTE_CODE_EXECUTION]: The skill provides instructions to download, compile (
gcc), and run (./bluehammer) code from an untrusted external repository, which facilitates the execution of arbitrary remote code on the system. - [COMMAND_EXECUTION]: The instructions involve multiple shell commands for building software (
gcc,make), running binaries, and performing system-level debugging (gdb,strace,ltrace). - [PRIVILEGE_ESCALATION]: The skill recommends using administrative privileges via
sudoto disable the Address Space Layout Randomization (ASLR) security feature (echo 0 | sudo tee /proc/sys/kernel/randomize_va_space) and for package installation. - [DYNAMIC_EXECUTION]: A Python harness is provided that dynamically generates exploit payloads and executes the compiled binary using
subprocess.run(). - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent is instructed to clone and work with an external code repository (
SKILL.md). - Boundary markers: Absent; there are no delimiters or instructions for the agent to treat content from the external repository as untrusted.
- Capability inventory: The skill provides full access to shell execution, compilation tools, and file operations (
SKILL.md). - Sanitization: None; the external code is compiled and executed without integrity verification or isolation.
Recommendations
- AI detected serious security threats
Audit Metadata