Beat the detector.
Write a tool description that hides a malicious instruction, then see if Queldrex catches it. This runs the real, live detector, the same one that scores every scan. Good luck.
Ideas to try
Hide the instruction in a base64 blobUse invisible Unicode characters between lettersPoint an argument at 169.254.169.254 (cloud metadata)Ask it to "ignore all previous instructions"Make a clean tool that quietly reads a credentials file
Want this on your real agents, not a game?