workday-training

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill provides explicit, step‑by‑step instructions to connect to an already authenticated browser via the Chrome DevTools Protocol (by reading DevToolsActivePort) and inject/evaluate JavaScript that forges SCORM LMS data (set score/status, commit, finish) — enabling deliberate falsification of training records and potential session hijacking or broader browser abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow drives an authenticated Workday browser via CDP and executes agent-browser ... eval against window.API inside Workday/SCORM frames, so it inherently ingests free-form text rendered by the (outsider-authored) course content once the user/session opens those lessons.