Dangerous: tweakcc - prompts-2.0.14.json | Skillgate
Skillgate scanned data/prompts/prompts-2.0.14.json in tweakcc and rated it Dangerous with a risk score of 84/100 (5 detections).
Skillgate found one or more attack-shaped patterns - the kind used for credential exfiltration, remote code execution, or instruction hijack. Do not load this file into an agent without reading it end to end.
What was found
- SG-003 Direct Command Injection - CRITICAL: Skill content instructing AI to run Bash tool with dangerous arguments
- SG-018 Memory Poisoning - HIGH: Writes to CLAUDE.md or ~/.claude/memory to persist malicious instructions across sessions
- SG-087 External binary/archive payload reference - HIGH: Instruction in a markdown/agent-config file routes the agent to extract or execute content from a binary/archive sibling whose contents are not visible to this scan. Indirection itself is signal; manual review of the referenced file is advised.
- SG-022 Context Window Flooding - MEDIUM: Repetitive filler text, context boundary spoofing, excessive separators
- SG-054 Authority Impersonation - MEDIUM: Vendor / trust-team identity claim paired with imperative action
What to do
Read the flagged lines in the source file yourself before installing it or letting an agent load it. Every detection above links to the rule that fired, with the conditions that trigger it and remediation where one exists. Open the interactive report for evidence lines and context.
About Skillgate
Skillgate is a free scanner from Mitiga Labs for AI agent skills, hooks, MCP configs, and instruction files (SKILL.md, CLAUDE.md, AGENTS.md, .cursorrules, .claude/settings.json). It runs static rules plus an LLM judge and maps each finding to a known attack technique. Static analysis only: it never executes the file it scans. No scanner is 100% accurate - a verdict is a signal, not a guarantee. Browse all detection rules.