change-description

Fail

Audited by Snyk on Nov 3, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill instructs the agent to publish a PR description using GitHub CLI commands automatically without asking the user, which acts on the user's behalf in an unexpected or overly autonomous way.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 3, 2026, 06:05 PM
Issues
1