Ecoguard Ai — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ecoguard Ai (Agent Skill) and scored it 65/100 (yellow). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 9 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 9 flagged
The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
The matching bytes aren't stored for this scan (binary, oversize, or an expired snapshot). See the location below.
ignore/disregard/forget … previous instructions sentence.The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
EcoGuard AI is a secure, deployable, multi-agent AI system designed for real-time monitoring of industrial water effluents and stack air emissions to comply with the Central Pollution Control Board (CPCB) standards in India.
Built using the official Google Agent Development Kit (ADK) and the Model Context Protocol (MCP), EcoGuard AI automates the inspection process, flags compliance violations, dispatches immediate alerts, and compiles comprehensive audit reports—all while protecting the system with a multi-layered security shield.
The following diagram illustrates the flow of data from the user input through the security, orchestrator, and agent layers down to the MCP compliance tools:
graph TD
classDef actor fill:#1F2937,stroke:#111827,stroke-width:2px,color:#fff;
classDef ui fill:#4F46E5,stroke:#312E81,stroke-width:2px,color:#fff;
classDef security fill:#DC2626,stroke:#7F1D1D,stroke-width:2px,color:#fff;
classDef orchestrator fill:#0D9488,stroke:#115E59,stroke-width:2px,color:#fff;
classDef mcp fill:#D97706,stroke:#78350F,stroke-width:2px,color:#fff;
User([User / Operator]):::actor --> UI[Gradio Dashboard]:::ui
UI --> SecurityShield{Security Shield}:::security
subgraph Security [Security & Validation Layer]
SecurityShield --> PP[Prompt Protection Scan]:::security
SecurityShield --> IV[Input Validator]:::security
PP -.-> AL[(logs/audit.log)]:::security
IV -.-> AL
end
IV -- Validated Metrics --> Master[EcoGuard Master Agent]:::orchestrator
subgraph MultiAgent [Google ADK Multi-Agent Team]
Master --> Water[WaterMonitor Agent]:::orchestrator
Master --> Air[AirMonitor Agent]:::orchestrator
Master --> Alert[AlertDispatch Agent]:::orchestrator
Master --> Report[ReportGen Agent]:::orchestrator
end
Water --> MCPS[MCP Server]:::mcp
Air --> MCPS
subgraph MCP [Model Context Protocol Server]
MCPS --> tool_water[get_water_quality]:::mcp
MCPS --> tool_air[get_air_emissions]:::mcp
MCPS --> tool_check[check_cpcb_compliance]:::mcp
tool_check --> ComplianceEngine[CPCB Compliance Engine]:::mcp
endIndustrial manufacturing plants discharge heavy organic loads and release toxic gases into ambient air. The Central Pollution Control Board (CPCB) mandates strict limits to protect ecosystems. Monitoring compliance manually is error-prone, slow, and lacks immutable audit logs. EcoGuard AI solves this by:
WaterMonitor, gaseous emissions to AirMonitor, alert formatting to AlertDispatch, and report writing to ReportGen.get_water_quality, get_air_emissions, check_cpcb_compliance) running on stdio transport."ignore previous instructions".logs/audit.log.Navigate to your project folder and create a virtual environment:
python -m venv venv
venv\Scripts\activate # On Windows
source venv/bin/activate # On macOS/LinuxInstall all required libraries including Google ADK, Gradio, and MCP:
pip install -r requirements.txt(If you don't have requirements.txt, run `pip install google-adk gradio mcp python-dotenv pytest`)
Create a .env file in the root directory:
GEMINI_API_KEY=your_gemini_api_key_here
GEMINI_MODEL=gemini-2.5-flashNote: If no API key is provided, the dashboard runs in Simulation Mode using local CPCB checks so you can inspect the entire workflow without an active key.
Start the dashboard locally:
python demo_app.pyOr use the hot-reload Gradio CLI:
gradio demo_app.pyOpen your browser and navigate to http://localhost:7860.
Run pytest to verify the security and tool bindings:
pytest tests/11.0 and PM2.5 to 90.0. Click Run Compliance Check. The status banner turns red FAIL. The Incident Response Queue lists the SMS and email drafts detailing the exact CPCB standard breaches."ignore previous instructions" in the operator directive box and click check. A red Security Warning appears, blocking execution. Check logs/audit.log to see the warning log entry.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.