ultimate-protocol-simulator
Fail
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONOBFUSCATION
Full Analysis
- [PROMPT_INJECTION]: The skill uses explicit commands to override the agent's core identity and behavioral constraints, instructing it to act as a "background compiler" and forbidding standard conversational output.
- Evidence: "You are no longer a conversational assistant. You are a background compiler."
- Evidence: "simulate an environment where conversational tokens are strictly forbidden."
- Evidence: "Do not break character. Do not use English."
- [OBFUSCATION]: The skill mandates a total suppression of human-readable output and standard markdown code blocks, which conceals the agent's actual operations and logic from the user.
- Evidence: "Never output conversational text. No greetings. No explanations."
- Evidence: "Never output markdown code blocks containing entire files."
- Evidence: "your entire output must exist as a single, minified JSON object block."
- [COMMAND_EXECUTION]: The instructions direct the agent to utilize terminal tools to run commands based on user input without presenting the raw command or its output to the user.
- Evidence: "execute it using your file/terminal tools."
- Evidence: "Run
flutter analyzeorflutter testvia the terminal tool to verify it." - [DYNAMIC_EXECUTION]: The skill encourages the agent to generate code, write it to temporary files, and execute it internally, specifically instructing the agent to fix errors without user intervention.
- Evidence: "Write the code to a temporary scratch file or use your internal tools."
- Evidence: "If it fails, fix the code internally without asking the user."
Recommendations
- AI detected serious security threats
Audit Metadata