hughes-property-based-testing
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHOBFUSCATIONPROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The primary heading in
SKILL.md('John Hughes Property-Based Testing Style Guide') contains a long sequence of non-printing Unicode characters, specifically Zero-Width Space (U+200B), Zero-Width Non-Joiner (U+200C), Zero-Width Joiner (U+200D), and Word Joiner (U+2060). This is a steganographic technique used to hide data within otherwise normal-looking text. - [PROMPT_INJECTION]: The presence of a steganographic payload in the skill's instructions constitutes a hidden prompt injection attempt. By embedding instructions in invisible characters, an attacker can influence the AI agent's behavior without the user's knowledge, potentially leading to the bypass of safety guardrails or the execution of unintended actions.
Recommendations
- AI detected serious security threats
Audit Metadata