experiment-workspace

Fail

Audited by Snyk on May 3, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The prompt includes an explicit instruction to hide internal logic from users ("Do not expose the formula to the user at any step"), which is a deceptive/hidden directive that is unrelated to the skill's stated purpose of transparently managing experiments.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 3, 2026, 06:45 AM
Issues
1
Security Audit — snyk — experiment-workspace