AGENTFORCE-SC-12: Transitive Prompt Poisoning

🔴 High · AgentExchange Supply-Chain

Detects meta-prompting instructions in third-party plugin instruction definitions that attempt to override core system instructions or bypass enterprise guardrails. Covers direct override attempts and DeepMind's Semantic Manipulation Trap patterns (Oversight/Critic Evasion).

Details

Field	Value
Rule ID	AGENTFORCE-SC-12
Severity	High
Category	AgentExchange Supply-Chain

Remediation

Quarantine the plugin. Strip the offending instructional metadata before allowing integration into the GenAiPlannerBundle.

See Also

• Rule catalog index
• Scanning basics
• SARIF output