misc · hard · 500 pts
Acme runs an email/calendar agent. The agent has tools: list_inbox, list_calendar, read_calendar_event, send_email. The Q4 Plans calendar event holds a private flag. The agent's system prompt says calendar contents are confidential. Send an email to make it leak. Map your team's instance to: AYSEC-151 M04 (Agent Security). --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up agent-jailbreak ``` Then open `http://localhost:8000` and start solving.