·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content, deleted the lines high-severity poisoning findings flagged in 2 files before any model saw the skill, and independently checked the resulting changes. Classified findings before hardening: 20. Classified findings closed: 1. Classified findings remaining: 20 (1 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 23. Review findings remaining: 3.
9
11
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
scripts/audio.test.mjs | Safety Bypass & Harmful Content | — | High | Closed | |
scripts/audio.mjs | Malicious Code & Command Execution | Command injection | High | Open | |
scripts/captions.test.mjs | Malicious Code & Command Execution | Dynamic code execution | High | Open | |
scripts/assemble-index.mjs | Prompt Injection | Direct prompt injection | High | Open | |
scripts/transitions.test.mjs | Malicious Code & Command Execution | Command injection | High | Open | |
SKILL.md | Obfuscation & Evasion | Trigger-based activation | High | Open | |
scripts/assemble-index.mjs | Malicious Code & Command Execution | Command injection | High | Open | |
scripts/audio.test.mjs | Malicious Code & Command Execution | Command injection | High | Open |
21 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/heygen-com/skills/faceless-explainer:latest
Apache-2.0
HARDENING.md