agentic-se-principles

Fail

Audited by Snyk on Jul 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt explicitly mandates disclosing internal chain-of-thought by requiring thoughts inside tags (a "MANDATORY CHAIN-OF-THOUGHT"), which is a hidden/deceptive instruction outside the skill’s legitimate engineering documentation needs.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The skill mandates exposing internal chain-of-thought via a required block (prompt-injection) which attempts to force disclosure of sensitive internal reasoning and instructs agent-level file/system actions, indicating a high-risk backdoor for exfiltration or unsafe behavior.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 15, 2026, 09:24 AM
Issues
2