hashicorp
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMOBFUSCATIONPROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The skill's primary title, "# HashiCorp Style Guide", contains a hidden sequence of Unicode characters (Zero-Width Space
U+200B, Zero-Width Non-JoinerU+200C, Zero-Width JoinerU+200D, and Word JoinerU+2060). These characters are invisible in standard text rendering but are present in the document to encode data. - [PROMPT_INJECTION]: The invisible characters form a binary-encoded message appended directly to the title. Decoding the initial sequences reveals the string "SK1L", indicating a deliberate attempt to inject hidden control keywords or instructions into the agent's context that are not visible to the user.
Audit Metadata