ctf-solve
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted external data (CTF challenge files) using standard analysis tools. This creates an inherent surface for indirect prompt injection or tool-specific vulnerabilities.
- Ingestion points: The instructions in
SKILL.mddirect the agent to run commands likefile *,strings, andbinwalkon unknown challenge files. - Boundary markers: No explicit delimiters or warnings to ignore instructions embedded within the analyzed files are present.
- Capability inventory: The skill utilizes shell command execution for binary analysis and network interaction (
nc). - Sanitization: No sanitization or validation of input filenames or file content is specified.
- Context: This risk is consistent with the skill's purpose as a CTF orchestration tool and is considered acceptable for the intended environment.
Audit Metadata