crypto-web-attack
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading security tools from external sources, including cloning repositories from GitHub (e.g., AonCyberLabs/PadBuster) and installing packages via system package managers (apt) or Python's package manager (pip).
- [COMMAND_EXECUTION]: Contains numerous examples of shell commands and Python scripts for cryptographic analysis. It involves executing local tools like
padbusterandhashpump, and running custom Python scripts for testing oracle responses and performing XOR manipulations. - [PROMPT_INJECTION]: Documents an attack surface for indirect prompt injection by processing untrusted data from external sources for cryptographic analysis.
- Ingestion points: Untrusted data entries include ENCRYPTED_TOKEN, COOKIE_VALUE, and token parameters in URLs (SKILL.md).
- Boundary markers: Explicit delimiters for untrusted data are not provided in the sample scripts.
- Capability inventory: The skill uses the requests library for network operations and calls external command-line utilities for exploit generation.
- Sanitization: Standard sanitization is not present as the methodology requires direct manipulation of raw input data.
Audit Metadata