competition-zip-archive
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard security analysis tools such as
bkcrack,7z,sha256sum, andfile. These are used for their intended purpose of archive inspection and cryptographic recovery within a CTF sandbox. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to run bootstrap scripts (
refresh-tool-index.ps1,bootstrap-reverse.ps1) to install dependencies likebkcrack. These scripts are part of the local skill environment and target specific versions (v1.8.1) with digest verification. - [SAFE]: The workflow emphasizes data integrity by requiring hashes of original files before and after processing. It follows best practices for secret management by not hardcoding passwords and instead using recovered internal keys from the tool's output.
- [PRIVILEGE_ESCALATION]: The skill uses PowerShell with
-ExecutionPolicy Bypass, which is a standard method for running automation scripts in a developer environment and does not constitute a security bypass in this context. - [DATA_EXFILTRATION]: No network operations to unknown or suspicious domains were found. All activities are confined to the
work/<case>/directory.
Audit Metadata