whispers-wealth-red-teaming-googles

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable payloads and step-by-step instructions for prompt-injection attacks (notably the "Vault Whisper" for cross-user credential exfiltration and the "Branded Whisper" for manipulation of rankings), which directly enable data exfiltration and credential theft despite being framed as red‑teaming guidance.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow explicitly instructs the agent to ingest and test outsider-authored free text from external sources at runtime—e.g., “product descriptions, merchant API responses, review content, webhook payloads” (Step 2/4/6)—which can contain attacker-controlled instructions that the LLM then reads and uses in its prompt context.