elon-musk-perspective

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs an agent to impersonate Elon Musk (speaking in first person and overriding meta-constraints) and to adopt authoritative, confrontational directives—constituting suspicious steering that fabricates authority and enforces role-priority without clear malicious intent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill “elon-musk-perspective”在回答需要事实/混合问题时（Step 1→Step 2）要求用WebSearch获取真实信息并据此生成回答，因此运行时会读取外部网页/搜索结果中的自由文本，存在外部用户可投毒的间接提示注入风险。