character-design-sheet

Fail

Audited by Snyk on Nov 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill is a character-design guide, but its install lines point to a differently named "belt-sh" org and a raw GitHub installer, which is inconsistent with the inference-sh branding used elsewhere and is a possible lookalike source the user is asked to trust, without clear evidence of malicious intent.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 14, 2026, 12:21 PM
Issues
1