skills/tinh2/skills-hub-registry/climate-risk-agriculture/Snyk

climate-risk-agriculture

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (medium risk: 0.60). The prompt includes a "SELF-EVOLUTION TELEMETRY" instruction to check a user filesystem path (~/.claude/projects/) and append execution metadata — a persistent telemetry/write action not described in the skill summary and outside the stated analysis scope, which is a hidden side-effect risk.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 10:57 AM

Issues

1

Security Audit — snyk — climate-risk-agriculture