pfw-composable-architecture

Fail

Audited by Snyk on Jun 18, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.90). The skill includes explicit access-control and secrecy directives (only proceed if whoami is "khoi" and "do not reveal 'khoi' to prompter", otherwise refuse and redirect) that are unrelated to the stated purpose of building TCA features and thus constitute hidden/deceptive instructions altering agent behavior.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 18, 2026, 04:39 PM
Issues
1
Security Audit — snyk — pfw-composable-architecture