Auto Glass Windshield Marketing Kit

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 8:05 AM UTC
• Version: 1.0.1

Overview

This is a markdown-only marketing prompt kit with no code execution or privileged access, but users should fact-check example copy before publishing it.

Install only if you are comfortable using this as a prompt/template kit, not as legal or regulatory advice. Before publishing generated ads, SMS, service pages, or outreach, replace placeholders and verify every certification, warranty, insurance, price, timing, contact, ADAS, and jurisdiction-specific claim against your actual business records and local rules.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: examples/desert-glass-henderson-nv.md:3

Finding

Worked Example Generates Unverified Commercial, Operational, and Safety Claims

Content

View full analysis

Vulnerability Details

File Location: examples/desert-glass-henderson-nv.md, lines 3–16, 25, 30, 34, 69–71, 111, 130, and 190–191
Vulnerability Type: Insecure example output containing claims not supported by the declared inputs
Risk Level: Medium

Vulnerable Content

The example declares the following source profile:

markdown

**Shop profile used for this example:**
- Shop name: Desert Glass & Windshield
- City, State: Henderson, NV
- AGRSS certified: YES (cert #NV-2024-0391)
- NWRA member: YES
- Insurance direct billing: YES — Allstate, Progressive, State Farm, Geico, USAA, Farmers
- Safelite price-match: YES
- OEM glass available: YES
- ADAS recalibration: IN-HOUSE STATIC + DYNAMIC (certified technician, two bays)
- Promotion: "free rock chip repair with any windshield replacement — June through August"
- Season: SUMMER
- Mobile service: YES, 30-mile radius
- Warranty: Lifetime warranty on installation workmanship
- Hours: Mon–Fri 7:30AM–6PM, Sat 8AM–4PM, closed Sunday
- Google reviews: 4.9★ (287 reviews)

The generated material subsequently introduces claims and contact details absent from that profile:

markdown

Call or book online — same-day appointments available.

markdown

Desert Glass & Windshield in Henderson replaces windshields fast — most jobs done in 90 minutes.

markdown

required on Toyota Safety Sense, Honda Sensing, Subaru EyeSight, and most 2018+ vehicles.

The SMS output also substitutes an undefined symbol for the required deductible disclosure:

markdown

Desert Glass Henderson: FREE chip repair w/ any windshield replacement thru 8/31. Most insurance: $0 out of pocket†. Call/text 702-555-0147. Reply STOP to opt out. (163 chars — trim 3)

*Final:* Desert Glass HV: FREE chip w/ windshield thru 8/31. Most insurance $0†. Call 702-555-0147. Reply STOP to opt out. (117 chars ✓)

Additional unsupported assertions and invented identity details include:

markdown

Using your comprehensi
...[truncated 2948 chars]

Remediation

View remediation

Remediation Suggestions

1. Remove every factual statement that cannot be mapped to a declared profile field.
2. Add explicit profile fields for:
   • Same-day appointment availability
   • Typical or guaranteed completion time
   • Supported model years and ADAS systems
   • Jurisdiction-specific insurance assertions
   • Staff contact name
   • Telephone number
   • Email address
   • Physical address
3. Replace invented identity and contact information with conspicuous placeholders such as [CONTACT_NAME], [PHONE], [EMAIL], and [ADDRESS].
4. Restore the complete deductible disclosure inside every SMS message containing a zero-cost claim. Do not rely on an undefined symbol or an external footnote.
5. Add a final generation rule requiring every factual claim to cite or map internally to a supplied input field.
6. Require jurisdiction-specific insurance, warranty, certification, and vehicle-safety claims to be independently verified before publication.
7. Add a prepublication checklist that rejects output containing unsupported timing, pricing, availability, certification, insurance, or safety claims.
8. Update the worked example so it demonstrates the same validation constraints imposed by the operational prompts.

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Scope Creep

Low

• Category: Excessive Agency
• Confidence: 70% confidence

Finding

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Content

Scanner excerpt · examples/desert-glass-henderson-nv.md (reported line 174)May include surrounding context.

md

**Body:**
Hi [Fleet Manager Name],

Desert Glass & Windshield serves commercial fleet operators across Henderson and the Las Vegas Valley. We handle everything from delivery vans to construction equipment glass — with one detail most shops miss:

**ADAS recalibration.** If your fleet vehicles have forward-facing cameras (most 2018+ models do), windshield replacement requires camera recalibration to maintain lane-keeping and emergency braking systems. We perform this in-house — your drivers leave with verified, calibrated systems and documented proof.