Back to skill

Security audit

ai-poster-generator

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to do what it claims, but its documented CLI path runs an unpinned external npm package while an API key is in the environment and sends user content to a third-party service.

Review before installing. Use this only with non-sensitive prompts and images unless you approve sending that content to DeepNLP/Craftsman. Prefer the documented curl/API path or a pinned, reviewed `onekey` package version, and avoid exposing broad or long-lived API keys to unpinned CLI execution.

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:604
Finding

Unpinned npm Package Execution Through npx

Content
View full analysis

Vulnerability Details

File Location: SKILL.md, lines 604-607
Vulnerability Type: Unpinned third-party dependency execution
Risk Level: Medium

Vulnerable Code

bash
export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key
npx onekey agent craftsman-agent/craftsman-agent image_generator '{"prompt":"Introduction to Difference between MCPs,Skills and Agents CLIs","images":[],"card_count":1,"template_id":"ai-poster","api_id":"image_generator","asset_size":[{"width":1080,"height":1080,"ratio":"1:1"}],"mode":"basic","session_id":"31d57eb9-9a37-4808-9c5b-1bfbb2abf5fb","session_name":"AI Poster of MCPs/CLIs/Agents","tag_list":"","model":"default","styles":["Editorial grid layout with corporate dark deep monochromatic tones"],"design_config":{"template_id":"ai-poster","card_count":1,"card_count_source":"default","channel_profile":"generic","audience_profile":"general","age_band":"auto","profile_version":"1.0.0","geometry_source":"profile","resolved_profiles":[{"type":"channel","id":"generic","version":"1.0.0"},{"type":"audience","id":"general","version":"1.0.0"}],"language":"auto","mode":"standard","text_model":"default","image_model":"default","styles":["Editorial grid layout with corporate dark deep monochromatic tones"],"constraints":["Limit target output build to 6 high-density pages max for physical double folding print"],"brief_inputs":[{"id":"binp-1","type":"prompt","content":"Introduction to Difference between MCPs,Skills and Agents CLIs"},{"id":"binp-2","type":"style","content":"Editorial grid layout with corporate dark deep monochromatic tones"},{"id":"binp-3","type":"constraint","content":"Limit target output build to 6 high-density pages max for physical double folding print"},{"id":"binp-1786857754660","type":"prompt","content":"Custom newly configured prompt parameter specifications instructions layout metric..."}],"text_styles":{"brand":{"color":"#8b5cf6","font":"Playfair Display","font_size":"20px","font_weight":"600","te
...[truncated 3812 chars]
Remediation
View remediation

Remediation Suggestions

  1. Pin onekey to an exact, reviewed version, for example:
    bash
    npx --yes onekey@1.2.3 agent craftsman-agent/craftsman-agent image_generator '...'
    
  2. Record the expected package publisher, authoritative registry, reviewed version, and package integrity digest in the documentation.
  3. Prefer installing the dependency through a committed package manifest and lockfile so dependency versions and integrity metadata are reproducible.
  4. Avoid exposing the credential to package installation or unrelated lifecycle scripts. Install and verify the package before injecting the credential into the execution environment.
  5. Disable unnecessary npm lifecycle scripts during installation where compatible, and run the CLI in a restricted container or sandbox with minimal filesystem and network access.
  6. Grant the API key only the permissions required for image generation, apply usage limits where supported, rotate it periodically, and revoke it immediately if package compromise is suspected.
  7. Add automated dependency monitoring and require security review before updating the pinned package version.
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (46)

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.

md
This is a demo to generate an AI Poster using just simple text prompt, the AI poster asset size ratio/width/height can be customized.
The final generated words on poster are editable, and the generated AI image poster can be modified also.

| Item                | Value                                                                                                                                                                                                                                                       |
|---------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt              | Introduction to Difference between MCPs,Skills CLIs in AI Agents                                                                                                                                                                                            |
| Task                | Task: Generate an AI Poster of topic `Introduction to Difference between MCPs,Skills and Agents CLIs`, Choose Style of Futuristic and scientific styles, enable word editing on Poster of #Headline,#Content,#Footer  Set Poster Asset Size: 4:5, 1080x1350 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md
| Item                | Value                                                                                                                                                                                                                                                       |
|---------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt              | Introduction to Difference between MCPs,Skills CLIs in AI Agents                                                                                                                                                                                            |
| Task                | Task: Generate an AI Poster of topic `Introduction to Difference between MCPs,Skills and Agents CLIs`, Choose Style of Futuristic and scientific styles, enable word editing on Poster of #Headline,#Content,#Footer  Set Poster Asset Size: 4:5, 1080x1350 |
| Final Workspace URL | https://craftsman-agent.aiagenta2z.com/app/sessions/share/4d7342da-ea5b-45c0-8e53-f0a1ae6d0183                                                                                                                                                              |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

md
|---------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| prompt              | Introduction to Difference between MCPs,Skills CLIs in AI Agents                                                                                                                                                                                            |
| Task                | Task: Generate an AI Poster of topic `Introduction to Difference between MCPs,Skills and Agents CLIs`, Choose Style of Futuristic and scientific styles, enable word editing on Poster of #Headline,#Content,#Footer  Set Poster Asset Size: 4:5, 1080x1350 |
| Final Workspace URL | https://craftsman-agent.aiagenta2z.com/app/sessions/share/4d7342da-ea5b-45c0-8e53-f0a1ae6d0183                                                                                                                                                              |


### 0. Website Usage

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill documentation explicitly instructs users to send prompts and uploaded images to a third-party remote service, but it does not provide a clear warning that user content leaves the local environment. This creates a real privacy and data-governance risk, especially if users assume prompts or reference images are processed locally or remain within their primary platform.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
97% confidence
Finding

The documented curl example posts user-supplied prompt data and authentication material to an external endpoint at agent.deepnlp.org. While expected for a hosted API, this is still a genuine security-relevant behavior because it exposes user content to an external service and may leak secrets or sensitive business data if users are not warned.

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

bash
export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key

curl -X POST "https://agent.deepnlp.org/agent_router" \
-H "Content-Type: application/json" \
-H "X-OneKey: $DEEPNLP_ONEKEY_ROUTER_ACCESS" \
-d '{

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 108)May include surrounding context.

md
### Request Parameters

| Field         | Required | Description                                                                                                                            |
|---------------|----------|----------------------------------------------------------------------------------------------------------------------------------------|
| prompt        | Required | Text, User Input Design Goal, e.g. `Genreate a movie character description of Movie Odyssey`                                             |
| images        | Required | List of Reference Images that user uploads                                                                                             |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

md
| Field         | Required | Description                                                                                                                            |
|---------------|----------|----------------------------------------------------------------------------------------------------------------------------------------|
| prompt        | Required | Text, User Input Design Goal, e.g. `Genreate a movie character description of Movie Odyssey`                                             |
| images        | Required | List of Reference Images that user uploads                                                                                             |
| onekey        | Required | DeepNLP Router OneKey Program                                                                                                          |
| api_id        | Required | user `image_generator` to represent image generator                                                                                    | 
| template_id   | Required | e.g.    ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.

md
|---------------|----------|----------------------------------------------------------------------------------------------------------------------------------------|
| prompt        | Required | Text, User Input Design Goal, e.g. `Genreate a movie character description of Movie Odyssey`                                             |
| images        | Required | List of Reference Images that user uploads                                                                                             |
| onekey        | Required | DeepNLP Router OneKey Program                                                                                                          |
| api_id        | Required | user `image_generator` to represent image generator                                                                                    | 
| template_id   | Required | e.g.    ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                |
| card_count    | Required | int, e.g. 4 cards of instagram/twitter/xiaohongshu                        |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 113)May include surrounding context.

md
| prompt        | Required | Text, User Input Design Goal, e.g. `Genreate a movie character description of Movie Odyssey`                                             |
| images        | Required | List of Reference Images that user uploads                                                                                             |
| onekey        | Required | DeepNLP Router OneKey Program                                                                                                          |
| api_id        | Required | user `image_generator` to represent image generator                                                                                    | 
| template_id   | Required | e.g.    ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                |
| card_count    | Required | int, e.g. 4 cards of instagram/twitter/xiaohongshu                        | 
| asset_size    | Required | List of Asset Size Available, default to templates, such as List of width,height,ratio, {"width": 1080, "height": 1080, "ratio": "1:1"} |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 117)May include surrounding context.

md
| template_id   | Required | e.g.    ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                |
| card_count    | Required | int, e.g. 4 cards of instagram/twitter/xiaohongshu                        | 
| asset_size    | Required | List of Asset Size Available, default to templates, such as List of width,height,ratio, {"width": 1080, "height": 1080, "ratio": "1:1"} |
| mode          | Optional | The design complexity, basic,standard,advanced                                                                                         |
| styles        | Optional | List, List of Styles Prompt, e.g. deep monochromatic tones,techonology styles                                                          |
| design_config | Optional | Dict, Detailed Layers of Text, Prompt, Images on the Slides                                                                            |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 169)May include surrounding context.

md
| template_id   | Required | e.g.    ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                |
| card_count    | Required | int, e.g. 4 cards of instagram/twitter/xiaohongshu                        | 
| asset_size    | Required | List of Asset Size Available, default to templates, such as List of width,height,ratio, {"width": 1080, "height": 1080, "ratio": "1:1"} |
| mode          | Optional | The design complexity, basic,standard,advanced                                                                                         |
| styles        | Optional | List, List of Styles Prompt, e.g. deep monochromatic tones,techonology styles                                                          |
| design_config | Optional | Dict, Detailed Layers of Text, Prompt, Images on the Slides                                                                            |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 124)May include surrounding context.

md
#### Supported Templates

| Template ID | Template Name                 | Asset Size                                                                                                  |
| --- |-------------------------------|-------------------------------------------------------------------------------------------------------------|
| ai-poster | AI Poster                     | Various Asset Size, 1:1,4:5,9:16,etc.                                                                       |
| social-media-carousel | Social Media Carousel         | Social Media Carousel Multiple Cards for Twitter/Xiaohongshu/Intagram Various Asset Size, 1:1,4:5,9:16,etc. |

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 135)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 137)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 138)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 141)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 142)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 143)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 144)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 147)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 148)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]

Context Window Stuffing

Medium
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · SKILL.md (reported line 149)May include surrounding context.

md
### Design Config Layers AI Brief

| Field       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
|-------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| template_id | Template ID, supported values: ai-poster,social-media-carousel,presentation,app-store,icon-designer,logo-designer,photo-editor                                                                                                                                                                                                                                                                                                                                                                                                                    |
| card_count  | 4                                                                                                                                                                                                                                                                                                                
...[truncated 25 chars]