unity-development

Fail

Audited by Snyk on Mar 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt includes a "Companion check" that instructs the agent to run local shell commands (ls ~/.claude/skills/ ...) and offer/install companion skills via npx, which is an out-of-scope, hidden operational instruction that accesses the filesystem and alters the environment rather than providing Unity development guidance.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 22, 2026, 08:30 PM
Issues
1
Security Audit — snyk — unity-development