result-aggregation

Fail

Audited by Snyk on Aug 18, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The document explicitly tells subagents to use mode: "bypassPermissions" and write directly to .claude/** (skipping staging/wrappers), which is an instruction to change agent privileges and bypass normal protections outside the skill's stated aggregation purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 18, 2026, 12:59 PM
Issues
1
Security Audit — snyk — result-aggregation