gooey-blob-system

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill's guidance is a benign gooey-blob design, but demo/index.html hides its entire page in a base64 string (line 19) that is decoded and loaded into a sandboxed iframe, which obscures the code from review without any sign that the decoded content is harmful.