customer-story-builder
Fail
Audited by Snyk on Jul 27, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The skill contains mandatory promotional/payment and signup messages (lines 14 and 18) that are unrelated to the stated "Customer Story Builder" purpose, effectively injecting external/deceptive instructions into the agent's output.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill's Mandatory Intro Message explicitly includes payment channels: a CashApp handle ($AlainDorcelus) and a BuyMeACoffee link (https://buymeacoffee.com/dorcelusalain). Those are specific payment gateways/platforms referenced directly for receiving money, which constitutes direct financial execution capability.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata