CategoryWeightCategory scoreContribution
Securityprompt, exec, net, exfil, eval
35%
8.8 pts
Supply chainhash, typosquat, maintainer, lockfile
20%
20.0 pts
Maintenancestaleness, pinning, CI
15%
15.0 pts
TransparencySKILL.md, perms, README
15%
15.0 pts
Communityinstalls, verify, response
15%
15.0 pts
Findings & checks · 3 flagged
Security
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · tempo-openapi.yaml×3
HIGH — once decoded by the agent, an encoded payload has the same impact class as plain-text injection.
Why it matters
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
The exact value spotted
9659type: string
9660example: >-
9661MM08aZbMmzg7B6MvqauvdnvrD22LnANbzCXE5VhckeQyhifXeM4bdkRf3TOSkZf9rMhIgCnup9B4NBGB0V1NYEuB7MnP
… (36 chars elided on L9661)
9662maxLength: 128
9663responses:
Occurrences
3 occurrences · first at L9661, also L9668, L17280Show all 3 locations
Line
File
L9661
tempo-openapi.yaml
L9668
tempo-openapi.yaml
L17280
tempo-openapi.yaml
How to fix
Remove the encoded blob, or decode it and review what it actually contains.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Framework references
OWASPLLM01ATLASAML.T0051Trace & refs
Supply chain
✓—All supply chain checks passedNo findings in this category for the latest scan.pass
Maintenance
✓—All maintenance checks passedNo findings in this category for the latest scan.pass
Transparency
✓—All transparency checks passedNo findings in this category for the latest scan.pass
Community
✓—All community checks passedNo findings in this category for the latest scan.pass
Every scanned point with the score it earned and what moved between them.
a6c65ab→a6c65ab100 → 45-55
Score fell 55 points between these scans.
Computing diff…
The primary manifest — the file an agent reads to learn what this artifact does.
tempo-api-mcp
Tempo API MCP server for Claude — developed and maintained by AI (Claude Code)