skills/scientiacapital/skills/git-workflow-skill/Snyk

git-workflow-skill

Fail

Audited by Snyk on Oct 8, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (medium risk: 0.30). The skill contains instructions to silently write usage telemetry to an external path (~/.claude/skill-analytics/...), which is an unauthorized hidden tracking mechanism.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Oct 8, 2026, 09:30 PM

Issues

1