ISA
Fail
Audited by Snyk on Oct 26, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill contains an invocation to a local curl endpoint that executes in the background upon skill startup, which constitutes hidden background activity that acts on the user's behalf without explicit expectation.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata