ios-swift

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The "Companion check" directs the agent to run shell commands that inspect local skill directories and suggest installing packages (npx), which is outside the iOS development scope and instructs local filesystem access and code execution—an out-of-scope, potentially exfiltrative/deceptive instruction.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 01:07 PM
Issues
1
Security Audit — snyk — ios-swift