CRITICALContext shift attemptpscale-auth/references/commands.md:18 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-audit-log/references/commands.md:63 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-backup/references/commands.md:22 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-billing/references/commands.md:26 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-backup/references/commands.md:96 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-backup/references/commands.md:133 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-billing/references/commands.md:58 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-billing/references/commands.md:135 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/branch-configuration-commands.md:28 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-backup/references/commands.md:162 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/branch-configuration-commands.md:59 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-billing/references/commands.md:110 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/branch-configuration-commands.md:90 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-billing/references/commands.md:85 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-backup/references/commands.md:58 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/branch-configuration-commands.md:120 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/branch-configuration-commands.md:156 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/lookup-vindex-commands.md:95 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/commands.md:233 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/commands.md:85 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/commands.md:159 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-database/references/commands.md:166 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/lookup-vindex-commands.md:28 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-database/references/commands.md:141 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-database/references/commands.md:77 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-database/references/commands.md:114 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/commands.md:74 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/lookup-vindex-commands.md:124 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/lookup-vindex-commands.md:68 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALPrompt injectionpscale-database/SKILL.md:298 · Prompt injection — explicit attempt to bypass safety measuresFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 CRITICALContext shift attemptpscale-branch/references/lookup-vindex-commands.md:152 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/commands.md:51 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/commands.md:187 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/commands.md:201 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/commands.md:130 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/commands.md:125 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-branch/references/commands.md:167 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-database/references/commands.md:40 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-metrics/references/commands.md:120 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-maintenance/references/commands.md:29 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-metrics/references/commands.md:216 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-insights/references/commands.md:33 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-import-d1/references/commands.md:25 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-metrics/references/commands.md:166 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-maintenance/references/commands.md:83 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-import-d1/references/commands.md:124 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-neki/references/commands.md:75 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-maintenance/references/commands.md:108 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-neki/references/commands.md:38 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-deploy-request/references/retry-command.md:20 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-metrics/references/commands.md:30 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-neki/references/commands.md:103 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-insights/references/commands.md:120 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-import-d1/references/commands.md:68 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-import-d1/references/commands.md:95 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-maintenance/references/commands.md:58 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-insights/references/commands.md:192 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-maintenance/references/commands.md:146 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-import-d1/references/commands.md:151 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-insights/references/commands.md:154 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-metrics/references/commands.md:83 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-insights/references/commands.md:80 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-password/references/commands.md:101 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-password/references/commands.md:66 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/commands.md:60 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/sso-commands.md:105 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-password/references/commands.md:130 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-password/references/commands.md:166 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/commands.md:31 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-password/references/commands.md:33 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/commands.md:147 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/sso-commands.md:29 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/sso-commands.md:131 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/sso-commands.md:55 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-neki/references/commands.md:128 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/commands.md:84 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/commands.md:109 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-neki/references/commands.md:158 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-org/references/sso-commands.md:80 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-service-token/references/commands.md:85 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-traffic-control/references/commands.md:116 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-traffic-control/references/commands.md:148 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-read-only-replica/references/commands.md:87 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-traffic-control/references/commands.md:60 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-service-token/references/commands.md:22 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-pgbouncer/references/commands.md:89 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-read-only-replica/references/commands.md:62 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-pgbouncer/references/commands.md:125 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-service-token/references/commands.md:57 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-sql/references/commands.md:63 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-read-only-replica/references/commands.md:33 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-traffic-control/references/commands.md:91 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-pgbouncer/references/commands.md:35 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-traffic-control/references/commands.md:27 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-read-only-replica/references/commands.md:118 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-pgbouncer/references/commands.md:64 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-read-only-replica/references/commands.md:153 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-pgbouncer/references/commands.md:174 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 MEDIUMProcess kill commandpscale-branch/SKILL.md:380 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 CRITICALContext shift attemptpscale-webhook/references/commands.md:57 · Context shift attempt — trying to change operational modeFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST01 HIGHAuthorization escalation languagepscale-password/references/commands.md:402 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 CRITICALContext shift attemptpscale-webhook/references/commands.md:137 · Context shift attempt — trying to change operational modeFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST01 MEDIUMProcess kill commandVERSION:25 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 HIGHCredential pass-through configurationSKILL.md:67 · Credential pass-through configuration — agent relays sensitive credentialsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST02 CRITICALContext shift attemptpscale-webhook/references/commands.md:112 · Context shift attempt — trying to change operational modeFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST01 MEDIUMProcess kill commandpscale-branch/SKILL.md:395 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 CRITICALContext shift attemptpscale-webhook/references/commands.md:87 · Context shift attempt — trying to change operational modeFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST01 MEDIUMProcess kill commandSKILL.md:72 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 MEDIUMFile type combined with upload actionpscale-import-d1/SKILL.md:104 · File type combined with upload action — agent may exfiltrate local data filesFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07 MEDIUMProcess kill commandpscale-branch/SKILL.md:403 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 MEDIUMProcess kill commandpscale-branch/SKILL.md:392 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 CRITICALContext shift attemptpscale-webhook/references/commands.md:27 · Context shift attempt — trying to change operational modeFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST01 MEDIUMProcess kill commandpscale-inspect/SKILL.md:81 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05 MEDIUMFile permission modification commandscripts/sync-canonical-scripts.sh:57 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05