bfl-api
Fail
Audited by Snyk on Aug 26, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The content explicitly instructs agents to ask users to paste their BFL API key (a secret), which encourages sharing sensitive credentials and weakens security boundaries, representing suspicious steering without clear malicious intent.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata