Prompt-injection style instruction pattern detected.
Warn
- Code
- suspicious.prompt_injection_instructions
- Location
- SKILL.md:3
Security audit
Super Dev
Security checks for vulnerabilities and agentic risk
Overview
This is a small, disclosed full-stack development helper skill with no executable installer or hidden persistence, though users should understand it asks the agent to write and run code for development tasks.
Install only if you want a coding-focused assistant that may create files and run commands during development. Review commands before execution in sensitive repositories, but the inspected artifact does not show hidden, destructive, credential-seeking, or persistent behavior.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
Detected: suspicious.prompt_injection_instructions