daftra-backup

• Outcome: Pass
• Latest audit: Sep 29, 2026 · 9:35 AM UTC
• Version: 1.0.2

Overview

This skill is a read-only Daftra CSV backup analysis aid, with sensitive business data handling that matches its stated purpose.

Treat the bundled and user-provided CSVs as sensitive business data. The skill appears safe for local read-only analysis, but users should be aware that some referenced helper scripts/reference files are missing from this artifact, so agents may need to analyze the CSVs directly instead of running the documented helper script.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (36)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md

---
name: daftra-backup
description: Analyze Daftra CSV backups covering customers, suppliers, products, invoices (and line items), purchase orders, expenses, and projects. Use this skill to read, search, inventory, link records, or prepare data for migration to MCP or import files—while checking for duplicate numbers and unresolved relationships. This skill does not provide a live connection or the ability to modify the Daftra account.
---

# Daftra Backup Analysis

## Define Source and Scope

- Use user-provided files if specified; otherwise, use the reference backup located in `assets/source/`.
- Treat the backu

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 51)May include surrounding context.

md

- The attached files contain a BOM at the start of the first data record following the headers. Remove it from memory before parsing the CSV; using `utf-8-sig` alone does not remove the internal BOM and may corrupt the first quoted field.
- Use a CSV reader that supports quoted text and newlines within fields, rather than simple comma or line-based splitting.
- Treat codes, phone numbers, and barcodes as text strings—preserving leading zeros (e.g., `000011`) and alphanumeric codes (e.g., `AZ-CRM-0005`). - Treat text consisting solely of whitespace as empty in the staging copy. Do not automatically convert empty numeric values ​​to zero.
- Use `Decimal` for financial calculations and log non-convertible values ​​instead of silently discarding them.
- Retain the file reference and CSV record number for each result. The record number is not necessarily the actual line number.

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.

md

- The attached files contain a BOM at the start of the first data record following the headers. Remove it from memory before parsing the CSV; using `utf-8-sig` alone does not remove the internal BOM and may corrupt the first quoted field.
- Use a CSV reader that supports quoted text and newlines within fields, rather than simple comma or line-based splitting.
- Treat codes, phone numbers, and barcodes as text strings—preserving leading zeros (e.g., `000011`) and alphanumeric codes (e.g., `AZ-CRM-0005`). - Treat text consisting solely of whitespace as empty in the staging copy. Do not automatically convert empty numeric values ​​to zero.
- Use `Decimal` for financial calculations and log non-convertible values ​​instead of silently discarding them.
- Retain the file reference and CSV record number for each result. The record number is not necessarily the actual line number.

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

md

- The attached files contain a BOM at the start of the first data record following the headers. Remove it from memory before parsing the CSV; using `utf-8-sig` alone does not remove the internal BOM and may corrupt the first quoted field.
- Use a CSV reader that supports quoted text and newlines within fields, rather than simple comma or line-based splitting.
- Treat codes, phone numbers, and barcodes as text strings—preserving leading zeros (e.g., `000011`) and alphanumeric codes (e.g., `AZ-CRM-0005`). - Treat text consisting solely of whitespace as empty in the staging copy. Do not automatically convert empty numeric values ​​to zero.
- Use `Decimal` for financial calculations and log non-convertible values ​​instead of silently discarding them.
- Retain the file reference and CSV record number for each result. The record number is not necessarily the actual line number.

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Client_contacts.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Client_contacts.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Clients.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Clients.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Expenses.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Expenses.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Invoice_items.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Invoice_items.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Invoices.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Invoices.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Products.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Products.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Projects.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Projects.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Purchase_order_items.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Purchase_order_items.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Purchase_orders.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Purchase_orders.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Supplier_contacts.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Supplier_contacts.csv (reported line 2)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · source/Suppliers.csv (reported line 1)May include surrounding context.

text

SupplierNumber,BusinessName,FirstName,LastName,Email,Address1,Address2,State,PostalCode,Phone1,Phone2,CountryCode,LastLogin,StaffID,bn1_label,bn1,bn2_label,bn2
000011,"Al Zain Electrical Tools",Mohamed,Abas," ","مول العتبه للكهرباء"," ",القاهرة," ",01060671933," ",EG," ",0,"سجل تجاري",33862,"بطاقة ضريبية",728497689
000012,"smart lights",Smart,Lights," ","ش 500 عمارت النيابه العامه ع 2 ش 204"," ",Governorate,11473,01020058951," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "
000013,"Gabson board",Ahmed,Taha," "," "," ",المنوفيه," ",01061010175," ",EG," ",0,"سجل تجاري"," ","بطاقة ضريبية"," "

Static analysis

No suspicious patterns detected.