systematic-debugging
Fail
Audited by Snyk on Aug 26, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill contains instructions for diagnostic instrumentation that explicitly print environment variables, secrets, and other contextual data to logs — which weakens security boundaries and is suspicious but not clearly malicious.
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill's diagnostic examples explicitly instruct printing environment variables (env | grep IDENTITY) and using a secret variable ($IDENTITY) in commands, which would expose secret values verbatim if run or echoed by the agent.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata