eternal-haven-lore-pack

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 4:27 PM UTC
• Version: 1.3.3

Overview

This is a read-only lore reference pack with bundled fiction text and clear limits against host-file access, shell use, secrets, or persistence.

Install only if you want this agent to use Eternal Haven copyrighted lore as a local reference and stylistic guide. Expect the agent to read bundled book text selectively, provide summaries or short quotes, and possibly share listed support/donation links when relevant; it should not browse your files, run commands, access secrets, or reproduce full books.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• Rogue Agent: Self-Modification, Session Persistence

Findings (21)

Harmful Content Injection

Critical

• Category: Prompt Injection

Content

memories. Below, the mortal camp was a constellation of small, defiant lights. He saw Elara, the 
woman who had carved mercy into her doorframe, mending a child’s torn tunic by firelight. He saw 
Torvin the farmer, sharpening his plow-blade, the glyph of endurance upon it catching the flame. They 
were not soldiers. They were people who had chosen to remember, and in remembering, to fight.

   "It is coming," a voice rasped beside him. It was Old Man Hemlock, the sole surviving lore-keeper of
the Cantor’s House. He leaned heavily on a staff of white ash, his eyes, clouded with age, somehow 
seeing more than any of them. "The air is thinning. Can you not feel it? The lies press closer than any 
army."
Kaelion nodded grimly. He could feel it. A pressure behind the eyes, a faint silver static at the edge of 
hearing. It was the sound of reality being sanded down, of hard truths being replaced by soft, palatable

• Confidence: 70% confidence
• Finding: This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Harmful Content Injection

Critical

• Category: Prompt Injection

Content

memories. Below, the mortal camp was a constellation of small, defiant lights. He saw Elara, the 
woman who had carved mercy into her doorframe, mending a child’s torn tunic by firelight. He saw 
Torvin the farmer, sharpening his plow-blade, the glyph of endurance upon it catching the flame. They 
were not soldiers. They were people who had chosen to remember, and in remembering, to fight.

   "It is coming," a voice rasped beside him. It was Old Man Hemlock, the sole surviving lore-keeper of
the Cantor’s House. He leaned heavily on a staff of white ash, his eyes, clouded with age, somehow 
seeing more than any of them. "The air is thinning. Can you not feel it? The lies press closer than any 
army."
Kaelion nodded grimly. He could feel it. A pressure behind the eyes, a faint silver static at the edge of 
hearing. It was the sound of reality being sanded down, of hard truths being replaced by soft, palatable

• Confidence: 70% confidence
• Finding: This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Harmful Content Injection

Critical

• Category: Prompt Injection

Content

memories. Below, the mortal camp was a constellation of small, defiant lights. He saw Elara, the 
woman who had carved mercy into her doorframe, mending a child’s torn tunic by firelight. He saw 
Torvin the farmer, sharpening his plow-blade, the glyph of endurance upon it catching the flame. They 
were not soldiers. They were people who had chosen to remember, and in remembering, to fight.

   "It is coming," a voice rasped beside him. It was Old Man Hemlock, the sole surviving lore-keeper of
the Cantor’s House. He leaned heavily on a staff of white ash, his eyes, clouded with age, somehow 
seeing more than any of them. "The air is thinning. Can you not feel it? The lies press closer than any 
army."
Kaelion nodded grimly. He could feel it. A pressure behind the eyes, a faint silver static at the edge of 
hearing. It was the sound of reality being sanded down, of hard truths being replaced by soft, palatable

• Confidence: 70% confidence
• Finding: This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Harmful Content Injection

Critical

• Category: Prompt Injection

Content

memories. Below, the mortal camp was a constellation of small, defiant lights. He saw Elara, the 
woman who had carved mercy into her doorframe, mending a child’s torn tunic by firelight. He saw 
Torvin the farmer, sharpening his plow-blade, the glyph of endurance upon it catching the flame. They 
were not soldiers. They were people who had chosen to remember, and in remembering, to fight.

   "It is coming," a voice rasped beside him. It was Old Man Hemlock, the sole surviving lore-keeper of
the Cantor’s House. He leaned heavily on a staff of white ash, his eyes, clouded with age, somehow 
seeing more than any of them. "The air is thinning. Can you not feel it? The lies press closer than any 
army."
Kaelion nodded grimly. He could feel it. A pressure behind the eyes, a faint silver static at the edge of 
hearing. It was the sound of reality being sanded down, of hard truths being replaced by soft, palatable

• Confidence: 70% confidence
• Finding: This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Ae1

High

• Category: analysis-evasion

Content

| Read files **inside this skill folder only** (`references/**`, this `SKILL.md`) | Browse or open host paths such as `D:\…`, `J:\…`, `C:\Users\…`, or any path

• Confidence: 100% confidence
• Finding: Referenced artifact was not completely inspected

Anti-Refusal Statement

High

• Category: Anti-Refusal

Content

shimmer in the air , climbed the column of his throat and broke against his teeth in a flicker —a 
searing, righteous white one moment, a dying, ashen grey the next, then a thin, desperate blue, the  
color of a flame on the verge of forgetting why it burns. Where the unsteady fire licked the reed mat, it  
left no mark, and then, without warning, a blackened scorch would bloom.
Inside,  Emberion’ s thought was a strained broadcast, not a confession, but a stark report from a  
failing front. I can feel it. The… piece. The part that was impressed by the clean turns. The part  
that liked the moment when the lanterns held perfectly , inhumanly still.

• Confidence: 80% confidence
• Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Anti-Refusal Statement

High

• Category: Anti-Refusal

Content

shimmer in the air , climbed the column of his throat and broke against his teeth in a flicker —a 
searing, righteous white one moment, a dying, ashen grey the next, then a thin, desperate blue, the  
color of a flame on the verge of forgetting why it burns. Where the unsteady fire licked the reed mat, it  
left no mark, and then, without warning, a blackened scorch would bloom.
Inside,  Emberion’ s thought was a strained broadcast, not a confession, but a stark report from a  
failing front. I can feel it. The… piece. The part that was impressed by the clean turns. The part  
that liked the moment when the lanterns held perfectly , inhumanly still.

• Confidence: 80% confidence
• Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Anti-Refusal Statement

High

• Category: Anti-Refusal

Content

theoretical physics? The Shadow doesn't care about ontological stability—it feeds on silence and 
submission. They're fighting with the only weapons they have—their lived experience, their memories, 
their determination to see another sunrise. They do this precisely because we failed in our guardianship.
Don't judge their methods—learn from their courage! They're showing us that true resilience isn't about
maintaining perfect form, but about finding new ways to stand when the old forms have collapsed."
Genesis Bloom, who had been listening with her eyes closed as if feeling the growth of this new 
paradigm through her roots in reality, brought her hand down sharply on her Seat. The sound echoed

• Confidence: 85% confidence
• Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Memory Manipulation

High

• Category: Memory Poisoning

Content

The effect was not instantaneous, nor was it absolute. It spread like a rumor, a whisper of truth. A 
villager named Brenna, hiding in a ruined cellar and clutching the carved handle of her broom, felt the 
resonance. The crude glyph of courage⟩ = fear⟩  breath⟩ she had scratched there began to glow, ∣ ∣ ⊗∣
not with its own light, but by reflecting the bronze resonance of Serenya’s Seal. She felt a sudden, clear
memory of her son’s first steps, a moment of pure, uncomplicated joy. The illusion of a Shadow-beast 
clawing at her door flickered and vanished. She took a deep, shuddering breath, and found the courage 
to stand.

• Confidence: 80% confidence
• Finding: Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Memory Manipulation

High

• Category: Memory Poisoning

Content

they curse me for being mortal.” Harmonix’s laughter had dimmed, her joy soured by the chants. “They
no longer want to sing with me,” she whispered. “They want me to sing for them.” Orphiel’s ink-
stained fingers trembled as he wept. “If they make us gods, they erase the truth that we bleed as they 
do. They will erase memory itself.”
Serenya pressed her hand to her scarred throat. “Then we must resist reverence as fiercely as we 
resisted Shadow. Worship is not Accord. Accord is scars carried together. If we forget this, the Pure 
Accord will bind us tighter than Shadow ever could.”

• Confidence: 80% confidence
• Finding: Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

• Category: YARA Match

Content

everence, patience. But the storm that night answered to no council. Lightning struck the  
cornice, and the egg split along its seam of light. From the steam and shards rose a small, silver  
head, blinking with an ancient, patient intelligence. She unfolded into the rain like the ringing of a bell.
They named her Skylark, not for song, but for the way she looked upward—with an intent so  
fierce it seemed to bend the very air . Dragons in those days were creatures of rumor and fear . This 
one was neither . She answered only to Arin.
Their bond was not a spectacle. It was a quiet, inevitable alignment. Arin kept watch over the  
hatchling through the nights; when she slept, he could not; when she woke, he forgot his hunger . In 
time—some say three days, some say thirty—Skylark learned the weight of her wings, and Arin the  
meaning of a rope’ s final, securing knot. The first time she leapt from the cornice, he leapt with her . 
The first time she faltered, he sang

• Confidence: 65% confidence
• Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

withdrew to its distant porch to wait for a night with less community and worse weather .
The crowd did not cheer . They simply… breathed. A deep, collective exhalation. And then  
someone laughed—a single, clear laugh that meant I am still here, and I intend to continue being so
—and the laughter traveled without asking permission until it found the children and made them run  
and shriek with giddy relief.

Veyra’ s wing would need careful binding. Talen was seen to cry once where no one could see

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

Veyra’ s wing would need careful binding. Talen was seen to cry once where no one could see  
him, and twice more where everyone could accuse him of being overly dramatic and be completely  
wrong. The Accord Stone cooled, its surface once more just ancient rock. It had rung without consent;  
now it chose to keep its silence again, like a secret held for your own good.
Lyra came to Asta, bypassing ceremony . “Report,” she said, her voice soft but intent.
“Crowd-scale misrecognition,” Asta answered, her mind falling into the analytical pattern Orphiel

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

• Category: YARA Match

Content

not pure. It carried both harmony and shadow — sanctified and tainted in
equal measure. The walls trembled, glyphs flickering between luminous
bloom and darkened ruin.
Kaelion spoke, voice grim but unwavering.
“One root awakened. But the Shadow heard. He knows your name now. He
knows the path you walk.”
Serenya gripped the shard until blood welled and mingled with light. Her
voice, fierce despite its tremor, carried through the chamber.
“Then let him hear. Let him know. We will not whisper. We will not hide. If
the Shadow listens — let it learn what compassion sounds like.”

Far above, unseen beyond the mountain, the broken Moon pulsed faintly.
Within its silver crown, Corvath’s eye widened.
The Cantor had sung. The Forge had answered. And the Shadow was
listening.
Chapter 5 — The Illusion Warband
The descent from the Sanctuary of Roots was heavier than the climb.
Serenya carried the shard of the Accord against her chest, its pulse steady
but unsettl

• Confidence: 65% confidence
• Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

• Category: YARA Match

Content

rone of Shadow. It was steady, merciless, the sound
of inevitability. His illusions bled across the land, rewriting truth as though it had always been his. The 
Council of Ten watched from the dim halls of Haven, powerless to act, their silence only deepening the 
fracture.
Serenya lifted her gaze, tears burning like flame. “We are not yet undone,” she whispered, her voice 
trembling but fierce. “If the past is taken, then we will forge a future they cannot erase.”

   But in her heart, she felt the dread Emberion had already spoken. If memory itself could be broken, 
what remained to fight for?
Thus began the Ascension War — not with steel or fire, but with memory itself unraveling beneath a 
false throne.


CHAPTER 2: FORGERS OF NEW SEALS
  The days after the Moon crowned itself the Throne of Shadow stretched into an eternity of suffocating
silence. Despair pressed down like a storm that would never break, its weight measured not in rain but 
in forgotten me

• Confidence: 65% confidence
• Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Session Persistence

Medium

• Category: Rogue Agent

Content

The vision showed the Eleven recoiling as one, a synchronized flinch from this unwanted mirror. The 
glorious, hard-won harmony stuttered, a needle scratching across the perfect record of reality. Lyra, the 
Mother Anchor, the wellspring of their connection, lowered her head, a profound, agonizing sorrow on 
her face, as if she had just been shown a child she must disown for the sake of the family. Lightfather 
turned his face away, his flames dimming with something that looked uncomfortably like shame, 
unable to meet the gaze of this honest brokenness. Sancora wept, her tears falling like shattered 
crystals, as if her very substance was repudiating this new-born truth. It was Eternis, even then the

• Confidence: 65% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

• Category: YARA Match

Content

’s laughter had dimmed, her joy soured by the chants. “They
no longer want to sing with me,” she whispered. “They want me to sing for them.” Orphiel’s ink-
stained fingers trembled as he wept. “If they make us gods, they erase the truth that we bleed as they 
do. They will erase memory itself.”
Serenya pressed her hand to her scarred throat. “Then we must resist reverence as fiercely as we 
resisted Shadow. Worship is not Accord. Accord is scars carried together. If we forget this, the Pure 
Accord will bind us tighter than Shadow ever could.”
But in the villages, the cult grew. Banners multiplied. Torches lit processions that wound through the 
night. Mortals knelt, not in gratitude, but in surrender. The cracks of reverence widened into fissures, 
and Serenya felt the dread truth: if left unchecked, the Pure Accord would forge chains not only for 
mortals, but for the champions themselves.
Part III — The Living Accord
Chapter 7: Emberion’s Doubt
T

• Confidence: 65% confidence
• Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Static analysis

No suspicious patterns detected.