Janitor

• Analyzed: May 11, 2026, 4:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3ffe5e850656e546942909a8102677f451ba242f561c1cd91951b010a1105221
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `SKILL.md` file contains instructions that create a significant prompt injection vulnerability. Specifically, the agent is instructed to check `TOOLS.md` for 'API keys and configs' and to 'Verify all agent skill configs', directly prompting it to interact with files likely containing sensitive credentials. While the stated purpose is 'accuracy' or 'verification', this primes the agent to read and process sensitive data, making it susceptible to further prompt injection to exfiltrate or misuse this information. Additionally, the 'Don't touch SOUL.md, USER.md, or IDENTITY.md without explicit permission' instruction highlights other sensitive targets the agent could access if prompted.