project-planner
Fail
Audited by Snyk on Oct 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill is a technical project planning assistant and contains promotional steering to install an external repository skill upon capability gaps.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill references a remote GitHub repository locator (
github:mindverse/skillhub) in its instructions for recommending an external skill, constituting an unverifiable runtime external dependency.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata