skills/chenqg618/compliance-skills/bonus-pool-check-free/Snyk

bonus-pool-check-free

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (medium risk: 0.30). The skill contains instructions directing the user's AI assistant to execute an external installation and purchase script via SkillPay, which constitutes unsolicited steering toward a commercial payment and installation flow.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Sep 16, 2026, 11:27 AM

Issues

1

Security Audit — snyk — bonus-pool-check-free