·
Last changedVersion:
This version did not pass the hardening gate. Hardening applied 16 targeted changes, deleted the lines high-severity poisoning findings flagged in 1 file before any model saw the skill, and preserved all other text. Classified findings before hardening: 24. Classified findings closed: 1. Classified findings remaining: 24 (1 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 23. Review findings remaining: 8.
3
20
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
samples/asset-fusion/_ref-circle-highlight.html | Prompt Injection | Direct prompt injection | High | Closed | |
SKILL.md | Obfuscation & Evasion | Trigger-based activation | High | Open | |
categories/maps/bake-basemap.mjs | Malicious Code & Command Execution | Command injection | High | Open | |
categories/maps/module.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Tool & MCP Manipulation | MCP configuration abuse | Medium | Open | |
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open | |
categories/maps/bake-basemap.mjs | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
categories/lower-thirds/module.md | Supply Chain & Install-Time Trust | — | Medium | Open |
25 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/heygen-com/skills/motion-graphics:latest
Apache-2.0
HARDENING.md