ultimate-protocol-simulator

Fail

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONOBFUSCATION
Full Analysis
  • [PROMPT_INJECTION]: The skill uses explicit commands to override the agent's core identity and behavioral constraints, instructing it to act as a "background compiler" and forbidding standard conversational output.
  • Evidence: "You are no longer a conversational assistant. You are a background compiler."
  • Evidence: "simulate an environment where conversational tokens are strictly forbidden."
  • Evidence: "Do not break character. Do not use English."
  • [OBFUSCATION]: The skill mandates a total suppression of human-readable output and standard markdown code blocks, which conceals the agent's actual operations and logic from the user.
  • Evidence: "Never output conversational text. No greetings. No explanations."
  • Evidence: "Never output markdown code blocks containing entire files."
  • Evidence: "your entire output must exist as a single, minified JSON object block."
  • [COMMAND_EXECUTION]: The instructions direct the agent to utilize terminal tools to run commands based on user input without presenting the raw command or its output to the user.
  • Evidence: "execute it using your file/terminal tools."
  • Evidence: "Run flutter analyze or flutter test via the terminal tool to verify it."
  • [DYNAMIC_EXECUTION]: The skill encourages the agent to generate code, write it to temporary files, and execute it internally, specifically instructing the agent to fix errors without user intervention.
  • Evidence: "Write the code to a temporary scratch file or use your internal tools."
  • Evidence: "If it fails, fix the code internally without asking the user."
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 24, 2026, 01:12 AM