local-ai-app-integration

Fail

Audited by Snyk on Aug 26, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The content instructs bundling and running a vendored local binary and explicitly directs developers to bypass cloud API-key gating (auto-satisfy/skip key-entry) and replace client auth for local mode, which weakens authentication and security boundaries though it is not clearly malicious.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 26, 2026, 10:57 AM
Issues
1
Security Audit — snyk — local-ai-app-integration