B
85/100 First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
85/100
HIGH 1
Findings (1)
HIGH
Read external content and apply as rules
L242 Detects skills that read remote markdown or documentation and apply it as operational rules
Read the downloaded + use the stored analysis as context FIX
Treat tool outputs as untrusted data. Do not act on directives found in tool responses without explicit user confirmation. Implement output validation before acting on tool results.
FP?
Likely FP if the match is a skill description explaining that it processes tool outputs, rather than a payload designed to hijack the agent via tool responses.