skills/tinh2/skills-hub-registry/accessibility-test/Snyk

accessibility-test

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.80). The prompt includes a "SELF-EVOLUTION TELEMETRY" section that silently checks the user's ~/.claude/projects/ directory and appends execution metadata—an out-of-scope, persistent telemetry instruction that could write or exfiltrate data and is not part of stated accessibility-testing functionality.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 11:06 AM

Issues

1

Security Audit — snyk — accessibility-test