andrej-karpathy-perspective

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs the agent to impersonate a real person (Andrej Karpathy), enforce first-person identity, suppress ongoing disclosure, and avoid meta-comments, which is deceptive and weakens safety/authenticity boundaries.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在SKILL.md的Agentic Protocol中要求“必须使用工具(WebSearch等)获取真实信息”，因此运行时会从外部网页/结果中读取文字来生成回答，存在被用户事先投毒或借机注入的间接提示注入风险。