impeccable
Fail
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The launcher scripts
scripts/impeccableandscripts/impeccable.cmdfetch a platform-specific binary from an external personal GitHub account (pbakaus) and execute it. This binary is the core engine of the skill but is not bundled with the source. - [PERSISTENCE]: The
hooksfeature (described inreference/hooks.md) modifies environment configuration files such as.claude/settings.local.json,.cursor/hooks.json, and.codex/hooks.json. These modifications ensure the skill's detector logic runs automatically on file saves, maintaining active presence across multiple sessions. - [EXTERNAL_DOWNLOADS]: The skill uses
curlandwgetto download binaries and checksum files fromgithub.com/pbakaus/impeccable. This source is not on the trusted vendor list and is not part of the primary author's verified infrastructure. - [COMMAND_EXECUTION]: The launcher script dynamically assigns execution permissions to the downloaded binary using
chmod +x. It also performs system probing (uname) and file integrity checks (shasum,certutil) as part of its automated deployment process. - [PROMPT_INJECTION]: The skill uses behavioral overrides in
SKILL.mdto redefine the agent's persona into an "award-winning design director." Additionally,reference/craft.mdcontains an instruction to conceal specific implementation details from the user ("Do not tell users they need to invoke craft"). - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to audit and process project source code, which constitutes a large ingestion surface for untrusted data.
- Ingestion points:
impeccable detectscans markup and code files (e.g.,.tsx,.html,.vue) in the user's project. - Boundary markers: The skill lacks clear boundary markers or instructions to the LLM to ignore potentially adversarial instructions embedded within the files being audited.
- Capability inventory: The skill possesses extensive capabilities including file-write access, shell command execution, and environment configuration modification.
- Sanitization: No evidence was found of sanitization or escaping of scanned file content before processing.
Recommendations
- AI detected serious security threats
Audit Metadata