YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]
High
- Category
- YARA Match
- Confidence
- 80% confidence
- Finding
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
- Content
md s, spanning 2026-01-01 to 2026-07-30, in 835ms of server time. It also takes `start_date`/`end_date`, and the filter really applies (a 2026-01-01..03-31 window returned 20/20 rows, none outside the range). `total` is the count actually returned, not the size of the match set. - **Semantic search** also fills the requested `limit` (100 → 100) at comparable speed (cold-cache 2.9s), adds LLM keyword extraction and an optional AI summary, and caches per query for ~12h. It accepts **no** date filter. - **Default to vector search**: full archive, exact counts, faster, and the only mode with date filtering. Reach for semantic search when you want the LLM-side extras (`include_summary`, keyword expansion) rather than raw nearest-neighbour hits. Historical note for anyone comparing older notes: before the 2026-07-31 fix, vector search rehydrated every hit from a ~6-week rolling table and dropped the rest, so `limit: 100` came back as ~50 and archive hits were unreachable.