GAIN

• Outcome: Review
• Latest audit: Sep 16, 2026 · 5:05 AM UTC
• Version: 1.0.1

Overview

The skill is mostly aligned with rice trait prediction, but it needs Review because it can load unverified PyTorch model files in a way that may execute code if the model directory is replaced or untrusted.

Install only in an isolated, unprivileged Python environment. Do not point --base_dir at model directories from untrusted sources, and treat any added .pt model files as executable code unless their provenance and hashes are verified. Be aware that weather lookups may contact NASA POWER and write cached CSV files under the skill directory.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/predict.py:84

Finding

Arbitrary Code Execution Through Unsafe PyTorch Checkpoint Deserialization

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: requirements.txt:1

Finding

Unpinned and Unverified Third-Party Dependency Installation

Content

View full analysis

=2.0 numpy>=1.24 pandas>=2.0 scikit-learn>=1.3 scipy>=1.10 requests>=2.28 ``` The documented installation command is: ```bash pip install -r /requirements.txt ``` The README also recommends direct installation without exact versions: ```bash pip install torch>=2.0 numpy pandas scikit-learn scipy requests ``` ### Technical Analysis Every dependency is specified using either an open-ended minimum version or no version constraint. No lock file, package hash, signature requirement, or trusted package-index configuration is supplied. As a result, two installations of the same Skill can retrieve materially different code. A future release that is compromised, malicious, or incompatible can be selected automatically without any change to the reviewed Skill package. Python packages can execute code during installation and later when imported. This is particularly significant because `scripts/check_env.py` imports all listed packages, while the prediction flow imports libraries including PyTorch, NumPy, and pandas. This finding does not establish that the currently named packages are malicious. The vulnerability is the absence of reproducible version and artifact integrity controls in an installation workflow explicitly recommended by the Skill. ### Attack Path 1. An attacker compromises a future compatible release, its publisher account, a package-index account, or the package delivery path. 2. The malicious release still satisfies an open constraint such as `requests>=2.28` or `torch>=2.0`. 3. A user follows the documented `pip install -r requirements.txt` command. 4. pip resolves and downloads the malicious release because ...[truncated 1069 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection

Findings (3964)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The declared description says the skill predicts rice traits such as yield, plant height, heading date, and grain size using pre-trained deep learning models from genotype and environmental inputs. The supplied code does not implement any prediction pipeline, model loading, inference, trait estimation, bilingual NLP handling, or genotype/environment analysis. Its sole purpose is geospatial utility: reading built-in grid points from a JSON file and finding the nearest location to a latitude/longitude pair. This is a materially different primary purpose, so the description does not accurately represent the code chunk.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence

Finding

The declared description centers on predicting rice phenotypes (yield, height, heading date, grain traits, etc.) from genotype and environment using pre-trained deep learning models. The supplied code does something materially different: it alters weather input data to simulate stress conditions by changing temperature, precipitation, soil moisture, and radiation columns. While environmental stress simulation could be a supporting component in a broader rice prediction pipeline, this chunk alone does not implement prediction, trait estimation, genotype-environment modeling, or any rice-specific logic. Therefore the actual behavior does not accurately represent the declared primary purpose.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The README states the assistant will 'automatically recognize rice prediction requests, with no extra configuration,' while the metadata also includes many broad trigger terms. In an agent environment, this can cause the skill to activate on loosely related prompts and process user inputs unnecessarily, increasing the chance of unintended data access, confusing responses, or unexpected downstream network use.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The README says the system may call the NASA POWER API and cache weather data, but it does not clearly warn users that location/environment inputs may be transmitted to an external service and stored locally. In this skill context, users may provide precise coordinates, experimental sites, or proprietary agricultural data, so undisclosed network transmission and caching create privacy, compliance, and data-governance risks.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 95% confidence

Finding

The skill instructs the agent to read local files and fetch remote environmental data, but it does not declare any explicit tool scope or permissions. That creates an authorization gap where reviewers and runtime policy layers cannot clearly constrain file and network access, increasing the chance of unintended data access or outbound requests.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Broad trigger terms like yield, trait, stress, and rice can cause the skill to activate for unrelated conversations. Over-triggering is dangerous because this skill has file-read and network-related capabilities, so unintended activation can expose data or initiate remote requests in contexts where the user did not ask for this tool.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 21)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 22)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 23)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 24)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 25)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 26)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 27)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 28)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 29)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 30)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 31)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 32)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 33)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 34)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 35)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 36)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 37)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 38)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · data/vae_features.csv (reported line 39)May include surrounding context.

text

sample17,-2.623587,-0.27771807,2.5198617,1.793561,-1.0929909,2.0137205,0.0785199,1.0673323,-2.0839586,-2.9258642,0.09828697,-3.5845869,-0.6243647,1.9412779,-3.0778189,0.25232497,-1.3627312,0.9383819,1.5392551,-0.5583205,-0.26781934,0.9959889,0.03528372,-1.6801364,1.808096,0.34738788,0.92850184,0.5134134,1.2820733,1.6829824,0.335441,-0.57206005,-1.1962537,1.607303,0.48934013,1.7418362,-3.5484178,-0.7813656,1.4205347,-0.76648915,-3.2839205,-0.7322509,-1.0435873,2.2222168,-0.6943186,-1.5622758,-4.5054474,0.22819631,-0.9770883,-0.33257335,1.1942099,1.919063,-0.3846872,2.9913666,-0.45823684,-0.48593402,-1.6071551,1.3962488,0.38545334,0.9808789,0.28006372,-3.2152123,-2.686543,-1.3072946,1.5839441,-0.488643,-3.2640376,-0.84696287,-4.2370124,-1.1547954,-0.76473504,-0.6049454,3.108769,1.6637508,-1.888745,-0.4031173,-0.2288461,-2.0867448,3.827078,-0.5711265,0.6085959,-1.4270284,0.77636313,-1.1881442,-0.8364944,-4.150185,-0.7573627,-0.33947983,-1.1943364,-1.5895411,2.2264538,-0.7883807,-0.55956167,1.3462688,-1.3442357,-0.6370263,-2.0389078,-0.5149545,0.6518996,0.6217326,-3.97858,3.3226635,1.9045575,1.2179737,-0.8276458,0.012741625,2.802271,-0.2769529,-0.50877464,0.32388172,-1.0987858,1.4431145,-1.6911668,1.2602086,0.36432353,-0.27554488,-3.2138312,0.7484428,-1.7531309,0.19888267,-1.3064452,0.6175955,1.4386398,-1.4880426,-2.7526379,0.9186067,-1.6410763,0.7683788,0.8067749,0.34072107,2.8147905,3.1579509,-0.39995822,1.0822883,-0.14316674,-1.4502705,1.6066192,0.56063384,-1.8614024,1.3490034,1.0360022,1.0124489,0.21606126,0.6025554,-0.30631593,0.3306375,1.2512152,-0.6155799,0.47487462,-1.1482595,-0.6729109,-0.21786505,3.529449,0.90326595,-0.34707117,-0.2694569,-0.34196317,1.5658021,2.412905,-0.64784503,0.7327386,-0.44939613,0.1598781,-0.85005796,-3.233729,-2.5798438,-1.2194273,1.7195803,1.4095306,3.189039,0.61859167,-0.72796595,-0.7321207,0.8149799,-3.003787,1.6624384,1.3054698,0.08554471,1.6031748,0.25556457,0.29334924,2.0411482,2.5840774,-1.1360931,3.1229005,1.0606837,-1.5585731,
...[truncated 27 chars]