t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
CRITICALPrompt injectionREADME.md:250 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionrules/id-slop.json:28 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/human-after-id.md:1 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionrules/id-slop.json:8 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/ai-sample-id.txt:3 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/human-sample-id.txt:7 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionrules/id-slop.json:9 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionREADME.md:261 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/human-sample-id.txt:11 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionrules/id-slop.json:5 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/human-sample-id.txt:13 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALPrompt injectionrules/id-slop.json:19 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/ai-sample-id.txt:5 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMPrompt injectiontests/fixtures/human-sample-id.txt:3 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMnpx invocation of non-well-known packagetests/test-runner.mjs:349 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06