impeccable
Fail
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher scripts
scripts/impeccableandscripts/impeccable.cmdare designed to download platform-specific binary engines from an external GitHub repository (github.com/pbakaus/impeccable) during the first run. - [REMOTE_CODE_EXECUTION]: After downloading the binary engine, the skill assigns executable permissions and runs the binary on the host system. While the skill includes checksum verification logic, the source is an external third-party that is not recognized as a trusted organization or well-known service in the security guidelines.
- [PERSISTENCE]: The skill attempts to establish automated execution hooks by modifying configuration files for AI agent environments (such as
.claude/settings.local.json,.cursor/hooks.json, and.codex/hooks.json). These hooks ensure that the skill's detector logic runs automatically on every subsequent file edit within the project. - [COMMAND_EXECUTION]: The skill invokes system-level utilities for mobile device and simulator manipulation, such as
adb exec-outfor Android andxcrun simctlfor iOS. It also interacts with local DevTools ports (9222) to inspect desktop applications. - [PROMPT_INJECTION]: Instruction files in
reference/degraded/contain meta-instructions directing the agent to disclose internal role-substitution information 'outside the output contract' and to 'step fully out of the work you just finished.' This pattern attempts to define communication constraints and role-play behaviors that could be used to minimize user oversight of agent state transitions.
Recommendations
- AI detected serious security threats
Audit Metadata