prompt-leak
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
High-risk offensive skill. It is internally consistent with its stated purpose, but that purpose is to extract hidden system prompts and internal AI configuration from target systems, which is a sensitive reconnaissance capability and system-prompt extraction abuse. No malware, installer, or credential-exfiltration code is present, but the skill materially enables prompt-injection and hidden-instruction disclosure attacks.
Confidence: 97%Severity: 86%
Audit Metadata