systematic-debugging

Fail

Audited by Snyk on Aug 26, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill contains instructions for diagnostic instrumentation that explicitly print environment variables, secrets, and other contextual data to logs — which weakens security boundaries and is suspicious but not clearly malicious.

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill's diagnostic examples explicitly instruct printing environment variables (env | grep IDENTITY) and using a secret variable ($IDENTITY) in commands, which would expose secret values verbatim if run or echoed by the agent.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 26, 2026, 11:01 PM
Issues
2
Security Audit — snyk — systematic-debugging