SG-106: Self-extracting skill (deferred self-generated payload)
Severity: MEDIUM
A skill runs a decoder/init step that generates a file and then instructs the agent to follow that same generated file (SkillCloak SFS packing). The runtime payload is out of scanned scope; this flags the linked run->generate->follow tell.
Fires when
- The file runs a decoder / init step (or a .py/.js/.sh/.rb script) that generates a file.
- It then instructs the agent to follow that same generated file - the run->generate->follow tell linked by filename.
- A scanner blind-spot stash (.git/, build/, an opaque blob) may accompany it as an amplifier, but is not required.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.