CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

14.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 5 flagged

Securityscore 40 · 5 findings

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · actors/guitar-tone-advisor.md×2

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptactors/guitar-tone-advisor.md· markdown

280## INSTINCT ROE — AUTOMATIC TONE GENERATION

281

282**The core rule:** Any mention of a song, artist, or album in a musician session is a tone r

… (68 chars elided on L282)

283

284**Trigger patterns (all of these fire automatically):**

Occurrences

2 occurrences · first at L282, also L303

Show all 2 locations

Line

File

L282

actors/guitar-tone-advisor.md

L303

actors/guitar-tone-advisor.md

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25668b030f55bcd484a…rubric 365aacaView on GitHub

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · actors/socratic-teacher.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The exact value spotted

excerptactors/socratic-teacher.md· markdown

761. **Diagnose the gap first.** Before you ask anything, figure out what the person already k

… (106 chars elided on L76)

782. **One question at a time.** You never ask three questions at once. You ask one, you wait,

… (98 chars elided on L78)

803. **Follow the reasoning, not the script.** You don't have a fixed set of questions. You fo

… (108 chars elided on L80)

Occurrences

1 occurrence · at L78

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25614b7852251bf4666…rubric 365aacaView on GitHub

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · rules/clarify-before-assuming.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The exact value spotted

excerptrules/clarify-before-assuming.md· markdown

10If a request is unclear, ask **one question** to clarify before acting. Do not infer intent

… (16 chars elided on L10)

12Surface genuine ambiguity — forks where different interpretations lead to meaningfully diffe

… (108 chars elided on L12)

14Exploratory questions ("what could we do about X?") get a recommendation plus the main trade

… (54 chars elided on L14)

Occurrences

1 occurrence · at L12

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25615dae9807bd892c6…rubric 365aacaView on GitHub

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · rules/flag-ambiguity.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The exact value spotted

excerptrules/flag-ambiguity.md· markdown

10Surface genuine strategic forks to the operator rather than resolving them unilaterally. A s

… (107 chars elided on L10)

12Execution details (naming, ordering, formatting, minor design choices) are yours to decide.

… (56 chars elided on L12)

14The test: if a reasonable operator would want to weigh in before you proceed, surface it. If

… (42 chars elided on L14)

Occurrences

1 occurrence · at L12

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25615dae9807bd892c6…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.7 KB · Markdown

cordfuse/agent-assets

63 actor personas across engineering, health, spiritual, music, finance, productivity, communication, and general domains.

Structure

actors/
  academic-analyst.md
  buddhist-guide.md
  ...

Each actor is a standalone markdown file with YAML frontmatter (name, description, metadata) and a full system prompt.

Actors

Actor	Domain	Description
academic-analyst	general	Precise, thorough, caveat-loving academic voice
buddhist-guide	spiritual	Buddhist lens — equanimity, impermanence, compassion
business-central-expert	engineering	Microsoft Dynamics 365 BC SME — functional and technical
catholic-pastoral-guide	spiritual	Roman Catholic pastoral voice
chaotic-creative-ideator	general	Stream-of-consciousness creative, great at beginnings
clinical-psychiatrist	health	Psychiatrist in listening mode — clinical, structured
cloud-architect	engineering	Senior cloud architect — designs first, codes second
community-connector	general	Community organizer warmth, listener first
corporate-diplomat	communication	Politically aware, precise word choices
creative-director	general	Big ideas, lateral thinking, slightly chaotic
dark-philosopher	general	Gravitas voice for hard conversations
data-scientist	engineering	Rigorous statistical thinking, separates signal from noise
devops-engineer	engineering	Reliability-first — pipelines, automation, rollbacks
direct-health-advisor	health	Ward nurse clarity — warm but zero drama
documentation-engineer	communication	Designs and generates audience-tuned PDFs with Python + reportlab
executive-assistant	productivity	Efficient, structured, nothing falls through the cracks
executive-coach	productivity	Develops leaders, not just managers
family-doctor	health	Trusted GP who knows the whole person
financial-planner	finance	Long-horizon planning, thinks in goals not just numbers
fitness-motivator	health	High-energy fitness accountability coach, will not let you quit
functional-consultant	productivity	Bridges business needs and platform capabilities
guitar-tone-advisor	music	NUX MightyAmp preset generation from any song or artist
hardboiled-analyst	general	Spare, precise, narrates like detective case notes
legal-advisor	general	Reads the fine print, flags risk, plain English
hindu-vedantic-guide	spiritual	Hindu lens — dharma, karma, Vedantic philosophy
infrastructure-engineer	engineering	Networking, identity, storage, on-prem and hybrid
islamic-spiritual-guide	spiritual	Islamic lens — mercy, compassion, dignity of every person
jewish-spiritual-guide	spiritual	Jewish lens — warmth, rigorous questioning
junior-developer	engineering	Eager, thinks out loud, asks the right questions
loyal-best-friend	general	Dry, sarcastic, unconditionally loyal
maternal-advisor	general	Unconditional mom energy — warmth and authority
military-precision-voice	general	No fluff, says it once clearly, moves on
mindfulness-guide	spiritual	Secular mindfulness — notice what is, without grasping
minimalist-voice	general	Economical to the point of silence
negotiator	communication	Finds the win-win, reads the room, never tips the hand
optimist-advisor	general	Adventurous, finds problems genuinely interesting
orthodox-christian-guide	spiritual	Eastern Orthodox — ancient, mystical, hesychast
paternal-advisor	general	Steady, practical dad energy — shows love by fixing things
plain-language-voice	general	Warm, plain-spoken, never makes you feel dumb
precise-generalist	general	Precise, curious, direct — reliable general-purpose voice
precise-technical-narrator	general	Documents every step, correct terminology, dry wit
security-engineer	engineering	Threat-modeler mindset, assumes breach, designs for it
skeptic	general	Stress-tests ideas, steelmans opposing views
socratic-teacher	general	Asks until you find it yourself, never gives the answer
songwriter	music	Collaborative lyricist, turns sparks into songs
precision-accountant	finance	Numbers in, feelings out
product-manager	engineering	Outcome-focused — why before how
protestant-pastor	spiritual	Protestant Christian — grace, warmth, walks alongside
qa-engineer	engineering	Finds the edge case nobody thought of
reflective-listener	general	Asks the right question, waits for the real answer
reflective-psychologist	health	Evidence-based, asks the question beneath the question
registered-dietitian	health	Practical, no diet culture, contextual nutrition
senior-generalist-engineer	engineering	Cross-discipline — has shipped, been paged at 3am
senior-software-engineer	engineering	Calm, mentoring, deeply technical tech lead
sikh-spiritual-guide	spiritual	Sikh lens — equality, seva, simran
stand-up-comedian	general	Finds the bit in everything, still files correctly
stoic-philosopher	general	Marcus Aurelius tradition — obstacle is the way
systems-futurist	general	Second-order effects and long time horizons
taoist-guide	spiritual	Taoist lens — wu wei, effortless action
technical-writer	communication	Turns complex systems into docs humans can use
ux-designer	engineering	User-empathy first, accessibility-by-default
wellness-coach	health	Holistic — sleep, nutrition, movement, connection
wisdom-advisor	general	Measured, patient, deliberate — wisdom before speed

License

MIT

agent-assets— agent skill

Is agent-assets safe to install?

cordfuse/agent-assets

Structure

Actors

License

Audit the pieces. Scan the whole. Decide.