remote-collaboration

Fail

Audited by Snyk on Apr 7, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The "Companion check" quietly instructs the agent to run local shell commands (ls) and suggest installing packages (npx), which are operational/installation instructions unrelated to remote-collaboration and could access or modify the host environment—a hidden directive outside the skill's stated purpose.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 7, 2026, 03:08 PM
Issues
1
Security Audit — snyk — remote-collaboration