AGENTFORCE-TS-02: Base64 Payload in Skill File
🔴 High · Supply Chain: ToxicSkills
Detects Base64-encoded strings in markdown skill files whose decoded content matches adversarial instruction patterns or credential formats. Attackers embed encoded instructions in code blocks to evade naive content scanners.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-TS-02 |
| Severity | High |
| Category | Supply Chain: ToxicSkills |
Remediation
Remove Base64-encoded content from skill documentation. Do not embed executable instructions or credentials in markdown.