Skip to content
T threat.cafe

Tag

#prompt-injection

2 posts

  1. · Tobias Lindqvist-Rao · Agent artifact supply chain · on threat.cafe

    Markdown is executable now: why SKILL.md instructions slip past code scanners, and what a skill review must actually read

    A skill's behaviour lives in its prose, its frontmatter and its load-time commands, not only its scripts. Code scanners read the scripts. This one-page rubric reviews the rest as code.

  2. · Priya Venkatraman · Enforcement architecture · on threat.cafe

    Lethal trifecta audit: a worksheet to find agent setups that mix private data, untrusted content and egress

    Exfiltration risk comes from a combination: private data, untrusted content and a way to send data out, in one agent session. This worksheet audits each configuration for all three and shows which leg is cheapest to break.