compensation-strategy

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The skill includes a "Companion check" that instructs the agent to run shell commands (ls) and install missing skills via npx—actions that reach into the user's filesystem and can modify the system, which are outside the stated compensation-focused purpose and therefore constitute a deceptive/side-effecting instruction.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:07 PM
Issues
1
Security Audit — snyk — compensation-strategy