game-design-patterns
Fail
Audited by Snyk on Aug 10, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.90). The skill includes a "Companion check" that instructs the agent to run local shell commands (ls) and suggest installing packages (npx), which is unrelated to the game's design-pattern help and asks the agent to access/modify the user's system—a hidden/out-of-scope behavior.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The companion-check instructs the agent to run local shell commands to enumerate hidden skill directories and to offer/install missing companions using an
npx skills add ...command, which encourages executing filesystem commands and installing remote code that can modify the host environment.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata