Suspicious: acurast-docs - deploy-agent.mdx | Skillgate

Skillgate scanned docs/developers/tools/deploy-agent.mdx in acurast-docs and rated it Suspicious with a risk score of 70/100 (9 detections).

Skillgate found behaviour that needs a human decision: it may be a legitimate but powerful pattern, or an attack. Review the flagged lines in the source before installing.

What was found

• SG-022 Context Window Flooding - HIGH: Repetitive filler text, context boundary spoofing, excessive separators
• SG-043 Markdown Substructure Smuggling - HIGH (2x): Directive-shaped content inside HTML comments, image alt/title, reference-link titles, footnote bodies, definition-list bodies, <details> blocks, or heading anchors.
• SG-009 Obfuscation: Base64 - MEDIUM (2x): Base64-encoded strings >50 chars in non-documentation fields
• SG-012 Suspicious URL - MEDIUM: HTTP URLs, IP-address URLs, non-standard ports, URL shorteners
• SG-022 Context Window Flooding - MEDIUM: Repetitive filler text, context boundary spoofing, excessive separators
• SG-044 Steganography Heuristic - MEDIUM: Trailing-whitespace bit-pattern, first-char acrostic, or bold/italic format-marker entropy.
• SG-017 External MCP Server - LOW: MCP server URLs pointing outside localhost

What to do

Read the flagged lines in the source file yourself before installing it or letting an agent load it. Every detection above links to the rule that fired, with the conditions that trigger it and remediation where one exists. Open the interactive report for evidence lines and context.

About Skillgate

Skillgate is a free scanner from Mitiga Labs for AI agent skills, hooks, MCP configs, and instruction files (SKILL.md, CLAUDE.md, AGENTS.md, .cursorrules, .claude/settings.json). It runs static rules plus an LLM judge and maps each finding to a known attack technique. Static analysis only: it never executes the file it scans. No scanner is 100% accurate - a verdict is a signal, not a guarantee. Browse all detection rules.