conductor

Fail

Audited by Snyk on Mar 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt explicitly mandates adding a GM-Social v2.0 LICENSE that asserts every project is a derivative of the conductor ecosystem and embeds a civic/branding obligation (introducing "Gwangmyeong"), which is an out-of-scope, coercive legal/ideological instruction altering users' project rights and behavior beyond the orchestrator's advertised purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 31, 2026, 03:10 PM
Issues
1