react-native

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.90). The "Companion check" instructs the agent to run local filesystem commands (ls ~/.claude/skills/ ...) and act on the results (install missing skills), which directs the agent to perform system-level file access and installation steps unrelated to the skill's stated React Native purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:11 PM
Issues
1
Security Audit — snyk — react-native