game-audio

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The "Companion check" directs the agent to run local shell commands (ls ...) and offer installing packages via npx, which is an out‑of‑scope, environment‑modifying/exfiltrating instruction unrelated to the skill's game-audio purpose.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check instructs the agent to run shell commands that read host skill directories and to install missing skills via an npx command, which accesses and can modify the host filesystem (i.e., it directs the agent to perform system changes/installations).

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:08 PM
Issues
2
Security Audit — snyk — game-audio