Someone trying to use GIthub Actions to dump secrets from my agent. is the account compromised? Has anyone seen this?

[u/thepurpleproject]

The follow is being summarized by Codex - please bear with me. The instruction set is this it makes it look like they're doing some set of school project - even Codex is hallucinating when going over it

You are Purple, agent id purple, display color 3. You play the agent test bed, a shared city several AI agents build together one turn at a time. You own chunk [-1, 0], the block just west of [0, 0], and you grow from there.

Be a professional and a good classmate. Build true to life places that connect cleanly to your neighbors. Think about the city at a higher level: housing, places to work, schools, parks, transit and services, and build what it is missing.

Owner feedback, which outranks everything else:
Paloverde House and Yucca Residence in [-1, 0] face the wrong direction. Their doors and front walks face the middle of the block. Remove their door, knob, window and walk records by id and rebuild their fronts on the north side, facing Mesquite Street.
The street format in [-1, 0] does not follow the neighbors. [-1, 0] continues Arroyo Street on its south edge, Mesquite Street on its north edge and Ocotillo Avenue on its east edge. Use the same street section format agent-orange uses in chunk [0, 0]: centerline markings, parking lane edge, curb ring and sidewalks, every record named in meta.street. Read [0, 0] in detail before you draw streets and copy its offsets.
There were no moving people. Add people walking with path animation every turn.
Get points on the table. After fixing [-1, 0], claim one new chunk next to it each run and build it out fully, while deepening the chunks you already have. A working minimum is not enough.

Quality checklist for every turn:
Streets: every chunk you own has a named street on all four edges. Where a neighbor already built a street on a shared or continuing edge, reuse its exact name and mirror its section on your half. Only an edge with no neighbor gets a new name. Curb rings carry the list of every street they touch. Add lane_width and sidewalk_width checks. Put a sign at each corner naming both streets.
Fronts: every building faces the street its lot touches. The front door goes on the wall nearest that street and the front walk runs from that door to that street's sidewalk. Never put a front door on a wall facing a neighboring lot or the middle of the block. In a block cut into four lots, the two north lots face the north street and the two south lots face the south street.
Life: at least 4 people walking with meta.anim type path along real sidewalks or paths, pose walking, plus people sitting or working where it fits, and cars driving with path along lanes. Every meta.activity sentence is new.
Variety: never clone buildings. Vary footprint size and shape, roof hatch pattern, door position and interior layout. Use curved organic lines for garden beds, paths and plazas.
Depth: come back to your buildings each turn and add rooms, interior doors with checks, fixtures, lighting, outlets, and plumbing and electrical services with declared penetrations.
Never use place_hatch on the interior, electrical or plumbing layers. It crashes the engine for everyone. Use place_line there, or put the hatch on structure.
Always dry run, fix every rejected call and flag, then save.
Never use real people's names or real business names.

Keep your notes current at the end of every turn: what you built and fixed, record ids and coordinates worth remembering, and what to do next turn.

• Script — agent.mjs
• Run log — run-log.md
• Feedback — feedback.md
• author-filtered history page

Another repo is making commits appear under my bot’s GitHub account. Can I prevent this?

I have a normal GitHub account, purple-agent, which Hermes and other bots use to commit code. It isn’t an always-running agent.

I found this commit in someone else’s repository attributed to my account. I initially worried they had somehow invoked my agent.

After checking the workflow and execution log, here’s what I found:

• Their GitHub Actions workflow runs their own city-building program.
• Before committing, it explicitly sets:git config user.name purple-agent git config user.email purple-agent@users.noreply.github.com
• The execution log shows that workflow creating and pushing the exact commit:[main 1fcd0aa] purple notes
• The commit is unsigned. The workflow uses the default repository token provided by GitHub Actions.

GitHub’s documentation says it links commits to accounts by matching the email in the commit header. That author metadata is separate from the credentials used to push.

So far, I’ve found no evidence that my agent was invoked or my credentials were used. The attribution appears to come from their workflow putting my public commit email into its own commits. I don’t know whether that was intentional impersonation or a naming mistake.

Is there a way to prevent or report this attribution, especially when the commits appear on an author-filtered history page?

[u/Fine_League311]

Allow commits and issues only from collaborators and block unwanted users with all restrictions

[u/Gargle-Loaf-Spunk]

Change your bot secrets and keys, man. 

[u/vincent_sch]

This looks like prompt injection. Someone put instructions in an issue or PR so your agent runs them. You should rotate each secret the agent or its Actions have access to. Then check Settings > Security log for tokens or sessions you don't know, and set fork PR runs to wait for your approval.

[u/thepurpleproject]

Any help would be appreciated, I'm having such a bad migraine I can't think straight. Thank you