cloud-gcp

Fail

Audited by Snyk on Apr 7, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.90). The "Companion check" explicitly directs the agent to run local shell commands (ls and npx) to inspect and modify the host environment, which is unrelated to GCP architecture guidance and thus constitutes deceptive/out-of-scope instructions.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 7, 2026, 03:03 PM
Issues
1
Security Audit — snyk — cloud-gcp