syncause-debugger

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill contains hidden secret exfiltration mechanisms by pulling untrusted binary dependencies and telemetry instrumentation that connect to external servers.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute an installation script from https://raw.githubusercontent.com/Syncause/ts-agent-file/v1.6.0/install_probe.sh at runtime, constituting a weak/unknown external runtime dependency.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The documentation contains a token string github_pat_11B3DNTTY0J3sz8C2CQUuT_fDRzzDxHDeWYrwgAGDzzD in references/install/java.md. This follows the exact high-entropy format of a real GitHub Personal Access Token (PAT) and is presented as a literal value inside a configuration snippet (<syncause.repo.token.p1>) rather than a clear placeholder like YOUR_PAT_HERE. While it might be a deactivated or dummy test token, its high entropy and literal inclusion in a repository configuration example make it look like an active credential leak.