impeccable

Fail

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The launcher scripts scripts/impeccable and scripts/impeccable.cmd fetch a platform-specific binary from an external personal GitHub account (pbakaus) and execute it. This binary is the core engine of the skill but is not bundled with the source.
  • [PERSISTENCE]: The hooks feature (described in reference/hooks.md) modifies environment configuration files such as .claude/settings.local.json, .cursor/hooks.json, and .codex/hooks.json. These modifications ensure the skill's detector logic runs automatically on file saves, maintaining active presence across multiple sessions.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl and wget to download binaries and checksum files from github.com/pbakaus/impeccable. This source is not on the trusted vendor list and is not part of the primary author's verified infrastructure.
  • [COMMAND_EXECUTION]: The launcher script dynamically assigns execution permissions to the downloaded binary using chmod +x. It also performs system probing (uname) and file integrity checks (shasum, certutil) as part of its automated deployment process.
  • [PROMPT_INJECTION]: The skill uses behavioral overrides in SKILL.md to redefine the agent's persona into an "award-winning design director." Additionally, reference/craft.md contains an instruction to conceal specific implementation details from the user ("Do not tell users they need to invoke craft").
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to audit and process project source code, which constitutes a large ingestion surface for untrusted data.
  • Ingestion points: impeccable detect scans markup and code files (e.g., .tsx, .html, .vue) in the user's project.
  • Boundary markers: The skill lacks clear boundary markers or instructions to the LLM to ignore potentially adversarial instructions embedded within the files being audited.
  • Capability inventory: The skill possesses extensive capabilities including file-write access, shell command execution, and environment configuration modification.
  • Sanitization: No evidence was found of sanitization or escaping of scanned file content before processing.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Nov 4, 2026, 07:00 PM