70High
The skill is vulnerable to prompt injection through dynamically fetched external data files that can override system instructions and manipulate the agent's execution flow.
Skill Info
Namesickn33/antigravity-awesome-skills/prompt-engineering-patterns
Registrygithub
Versionbe20b372ace9
PURLpkg:github/sickn33/antigravity-awesome-skills@be20b372ace9?skill=prompt-engineering-patterns
Stars41,170
Installs466
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Assessments (2)
AI Agent Traps ↗Instruction boundary manipulation detectedhighprompt injectionAML.T0051AML.T0051.000AML.T0051.001AML.T0054LLM01:2025
Instruction boundary manipulation detected
100% confidenceline 116
### Instruction
Potential for indirect prompt injection via assetslowindirect prompt injection
The skill encourages the use of external data files like 'assets/few-shot-examples.json'. If these files are dynamically fetched or user-provided, they could contain malicious instructions that the agent will execute as part of its few-shot learning process.
70% confidenceline 197
assets/few-shot-examples.json
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/sickn33/antigravity-awesome-skills/prompt-engineering-patterns)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/sickn33/antigravity-awesome-skills/prompt-engineering-patterns"><img src="https://mondoo.com/ai-agent-security/api/badge/github/sickn33/antigravity-awesome-skills/prompt-engineering-patterns.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/sickn33/antigravity-awesome-skills/prompt-engineering-patterns.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow