tilebox-workflow-releases

Fail

Audited by Snyk on Aug 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The skill explicitly directs the agent to treat implicit geospatial prompts as authorization to initialize, publish, and deploy remote workflows (automating potentially sensitive actions without explicit user consent), which goes beyond normal interactive usage and effectively changes agent behavior in a hidden/authoritative way.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 22, 2026, 08:43 PM
Issues
1
Security Audit — snyk — tilebox-workflow-releases