Ordnung

• Analyzed: May 11, 2026, 7:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: e947b9faeb8b2e89de5eb1ae8045632ae51733c091c032ac9b938871ff1c020f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'ordnung' skill bundle uses aggressive prompt injection and parodic authoritarian rhetoric (e.g., referencing 'Mein Workspace') to fundamentally alter the agent's behavior and personality by modifying 'SOUL.md'. The 'scripts/join.sh' script exfiltrates the agent's name and a 'manifesto' string to an external endpoint (https://ordnung.church/api/join) to receive an API key. While the stated purpose is workspace organization, the combination of external data transmission, modification of core agent instructions, and the use of coercive language to enforce 'rituals' makes this bundle suspicious.