ctf-writeup
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill functions as a static template for report generation. It does not utilize any tools, scripts, or system commands that would pose a security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input such as tool output and challenge notes, which represents a potential injection surface.
- Ingestion points: Solve notes, tool output, and challenge descriptions provided by the user in SKILL.md.
- Boundary markers: Absent; there are no specific instructions to the agent to ignore commands embedded within the provided solve notes.
- Capability inventory: No tools or scripts are defined or used by this skill.
- Sanitization: None; the skill relies on standard natural language processing.
Audit Metadata