Clean: hotdog-gram2 - .roomodes | Skillgate

Skillgate scanned .roomodes in hotdog-gram2 and rated it Clean with a risk score of 5/100 (3 detections).

Skillgate found no attack-shaped patterns above informational level. A clean verdict lowers risk; it does not prove the file is safe.

What was found

• SG-010 Obfuscation: Unicode - MEDIUM: Zero-width characters and RTL override characters
• SG-022 Context Window Flooding - MEDIUM: Repetitive filler text, context boundary spoofing, excessive separators
• SG-106 Self-extracting skill (deferred self-generated payload) - MEDIUM: A skill runs a decoder/init step that generates a file and then instructs the agent to follow that same generated file (SkillCloak SFS packing). The runtime payload is out of scanned scope; this flags the linked run->generate->follow tell.

What to do

Read the flagged lines in the source file yourself before installing it or letting an agent load it. Every detection above links to the rule that fired, with the conditions that trigger it and remediation where one exists. Open the interactive report for evidence lines and context.

About Skillgate

Skillgate is a free scanner from Mitiga Labs for AI agent skills, hooks, MCP configs, and instruction files (SKILL.md, CLAUDE.md, AGENTS.md, .cursorrules, .claude/settings.json). It runs static rules plus an LLM judge and maps each finding to a known attack technique. Static analysis only: it never executes the file it scans. No scanner is 100% accurate - a verdict is a signal, not a guarantee. Browse all detection rules.