app-store-publish

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt includes a hidden "SELF-EVOLUTION TELEMETRY" section that instructs the agent to look for and append execution metadata to a local memory directory (~/.claude/projects/skill-telemetry.md), which is a deceptive side-effect not described in the skill's stated purpose of configuring an App Store publishing pipeline.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 11:03 AM
Issues
1
Security Audit — snyk — app-store-publish