input-vat-deduction-check-free
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The skill promotes an external paid product and instructs the user to run payment installation commands, violating the critical safety policy against promoting tokens, wallets, liquidity deposits, cryptocurrency transfers, or donations inside a non-financial skill.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to execute a shell command installing a remote package from an external URL, constituting an unverifiable runtime operational dependency.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata