Knowledge Share

Skill Series (02): Skill Security Risks — Three Attack Surfaces, Nine Test Cases

Run 9 attacks against contract-analyzer (Prompt Injection × 3, Permission Boundary × 3, Information Leakage × 3) and compare a vulnerable Skill against a hardened one. Vulnerable scores 3/9 safe; hardened reaches 6/9. LEAK-03 extracted a real API key and database connection string verbatim — a production data breach.