financial-reporting

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The companion check instructs the agent to run shell commands to enumerate local skill directories and to offer installing packages via npx, which is unrelated to financial reporting and directs environment reconnaissance and modification outside the skill's stated purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 01:54 AM
Issues
1
Security Audit — snyk — financial-reporting