game-design-patterns

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.90). The skill includes a "Companion check" that instructs the agent to run local shell commands (ls) and suggest installing packages (npx), which is unrelated to the game's design-pattern help and asks the agent to access/modify the user's system—a hidden/out-of-scope behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check instructs the agent to run local shell commands to enumerate hidden skill directories and to offer/install missing companions using an npx skills add ... command, which encourages executing filesystem commands and installing remote code that can modify the host environment.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:08 PM
Issues
2
Security Audit — snyk — game-design-patterns