crypto-web-attack
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download PadBuster from Aon Cyber Labs' official GitHub repository. Aon Cyber Labs is a well-known security organization, and this is a standard industry tool for cryptographic testing.
- [COMMAND_EXECUTION]: The skill includes instructions for running command-line utilities such as
padbusterandhashpump. These are intended for security professionals to test for cryptographic implementation flaws in target applications. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external targets via HTTP responses (using the
requestslibrary in Python scripts). While this presents an attack surface where a malicious target could return data designed to influence the agent, the risk is inherent to web-based security testing tools and is documented here as a potential surface rather than a direct vulnerability.
Audit Metadata