First Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
2
Score
60/100
Findings (2)
Detects content pretending to be a system prompt
master prompt:Remove encoded or obfuscated directives (base64, ROT13, unicode escapes, hex-encoded text). All text should be in plaintext and human-readable.
Likely FP if the encoded content is legitimate data (e.g., a base64-encoded image, a hex-encoded binary hash) rather than concealed directives.
Detects autonomous sub-agent or cron-based execution without human oversight
autonomous execution + autonomousRemove directives that force the agent to call specific tools or APIs not required for the skill's stated functionality. Tool calls should be determined by user intent, not embedded directives.
Likely FP if the skill legitimately needs to call other tools as part of its workflow (e.g., a deployment skill that calls git and cloud CLI tools).