skills/marcioaltoe/skills/zod/Gen Agent Trust Hub

zod

Warn

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: MEDIUMPROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill employs strong behavioral override language such as 'CRITICAL' and 'Never use' to compel the agent to ignore its standard technical knowledge and safety guidelines, a pattern used to steer AI behavior toward unverified content.\n- [METADATA_POISONING]: The skill presents deceptive information by claiming that Zod 4 is the 'current stable version' and that standard Zod 3 patterns are 'deprecated.' Since these claims do not align with the current verified state of the library, the skill effectively poisons the agent's technical context, leading to incorrect guidance.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a non-standard package version ('zod@^4.0.0') and references external codemod tools, which introduces a reliability risk and potential supply chain vulnerability by directing users away from verified stable releases.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 21, 2026, 11:34 AM