ctf-crypto
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a static knowledge base and reference for security researchers and CTF players. It includes extensive documentation on classic ciphers, RSA attacks, elliptic curve cryptography, and modern cipher weaknesses.
- [SAFE]: While the skill mentions installing tools like
pycryptodome,z3-solver,sympy,gmpy2, andfpylll, these are standard, well-known libraries used in the cryptography and security community. All references to external tools (such as RsaCtfTool or quipqiup.com) are standard utilities in the intended CTF context. - [SAFE]: The code snippets provided are educational templates designed for solving mathematical puzzles. No evidence of prompt injection, data exfiltration, or malicious obfuscation was found. The 'obfuscation' mentioned in the category 3 requirements (like hex or base64) is discussed only as a subject of analysis for the user to solve, not as a technique used by the skill itself to hide its own behavior.
- [SAFE]: The skill requires a filesystem-based agent with internet access for legitimate tool installation (e.g., pip install) to function as a helper for the user's local security research.
Audit Metadata