Email Capture Generator

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 11:58 PM UTC
• Version: 1.0.1

Overview

This skill is a simple marketing page generator with no executable code, persistence, credential access, or hidden agent instructions.

Before publishing pages generated from this skill, use an escaping template engine or sanitize user-provided copy, and only use trusted HTTPS destinations for form actions, image URLs, privacy links, and terms links.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: templates/squeeze-page.html:224

Finding

Unescaped Template Variables Allow HTML Injection, Cross-Site Scripting, and Form Redirection

Content

View full analysis

{{HEADLINE}}

{{SUBHEADLINE}}

{{CTA_TEXT}}

``` ```html

• {{BENEFIT_1}}
• {{BENEFIT_2}}
• {{BENEFIT_3}}
• {{BENEFIT_4}}
• {{BENEFIT_5}}

``` ```html

Join {{SUBSCRIBER_COUNT}}+ subscribers

{{SUBSCRIBER_COUNT}}+

"{{TESTIMONIAL_1}}"

- {{TESTIMONIAL_1_AUTHOR}}

"{{TESTIMONIAL_2}}"

- {{TESTIMONIAL_2_AUTHOR}}

``` ```html

{{URGENCY_HEADLINE}}

{{URGENCY_MESSAGE}}

{{#if COUNTDOWN_DATE}}

{{COUNTDOWN_DATE}}

{{/if}} ``` ```html

Privacy Policy Terms of Service

``` ### Technical Analysis The template places configurable values directly into HTML text nodes and quoted attributes. The project documentation instructs users to replace these placeholders but does not require context-aware output encoding or validation of URL destinations. If an untrusted value contains ...[truncated 3148 chars]

Remediation

View remediation

alert(1) " onerror="alert(1) javascript:alert(1) ``` - Verify that payloads are displayed as harmless text or rejected. - Verify that form, image, privacy, and terms URLs cannot target ...[truncated 352 chars]

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · templates/squeeze-page.html (reported line 233)May include surrounding context.

html

</head>
<body>

    <!-- 1. HOOK (HERO SECTION) -->
    <section class="hero">
        <div class="container">
            <h1>{{HEADLINE}}</h1>

Static analysis

No suspicious patterns detected.