crockford-good-parts
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHOBFUSCATIONPROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The skill uses hidden Unicode characters (U+200B Zero-Width Space, U+200C Zero-Width Non-Joiner, U+200D Zero-Width Joiner, and U+2060 Word Joiner) to embed invisible data within the markdown headers of multiple files. This technique, known as zero-width steganography, is a highly suspicious method for hiding information from human review while remaining accessible to the AI model.\n
- Evidence in
SKILL.md: The main header contains a sequence of approximately 200 hidden characters appended to "Douglas Crockford Style Guide".\n - Evidence in
references/philosophy.md: The main header "Douglas Crockford Philosophy" also contains a significant sequence of these hidden characters.\n- [PROMPT_INJECTION]: The use of steganographic Unicode characters within the skill's instructions and reference documentation is a characteristic pattern for delivering hidden prompt injections. These instructions are typically intended to override the agent's safety guidelines or perform unauthorized actions like data exfiltration without the user's knowledge.
Recommendations
- AI detected serious security threats
Audit Metadata