game-theory
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill metadata field
homepagecontains the URLhttps://github.com/tedkaczynski-the-bot/game-theory. The account nametedkaczynski-the-botreferences a domestic terrorist and is highly inappropriate for professional skill metadata. Furthermore, this name is inconsistent with the stated authorsundial-org, indicating deceptive or misleading metadata placement. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze complex external data (protocol tokenomics, governance proposals, MEV strategies) which presents an attack surface for instructions hidden within that data.
- Ingestion points: The
SKILL.mdinstructions and various reference documents (e.g.,governance-attacks.md,tokenomics-analysis.md) prompt the agent to analyze external protocol specifications and community data. - Boundary markers: No boundary markers or "ignore embedded instructions" warnings are included in the
Analysis Templateor methodology sections to protect the agent from adversarial content in the analyzed protocols. - Capability inventory: The skill does not define dangerous tools such as shell access or network operations, limiting the impact of a potential injection to context poisoning.
- Sanitization: The methodology lacks any validation or sanitization steps for external data before it is processed by the agent.
Audit Metadata