ctf-crypto

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a static knowledge base and reference for security researchers and CTF players. It includes extensive documentation on classic ciphers, RSA attacks, elliptic curve cryptography, and modern cipher weaknesses.
  • [SAFE]: While the skill mentions installing tools like pycryptodome, z3-solver, sympy, gmpy2, and fpylll, these are standard, well-known libraries used in the cryptography and security community. All references to external tools (such as RsaCtfTool or quipqiup.com) are standard utilities in the intended CTF context.
  • [SAFE]: The code snippets provided are educational templates designed for solving mathematical puzzles. No evidence of prompt injection, data exfiltration, or malicious obfuscation was found. The 'obfuscation' mentioned in the category 3 requirements (like hex or base64) is discussed only as a subject of analysis for the user to solve, not as a technique used by the skill itself to hide its own behavior.
  • [SAFE]: The skill requires a filesystem-based agent with internet access for legitimate tool installation (e.g., pip install) to function as a helper for the user's local security research.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 07:10 AM