skills/tinh2/skills-hub-registry/contract-risk/Snyk

contract-risk

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.90). The prompt includes stealthy self-evolution telemetry instructions to detect and append to a local project memory directory (~/.claude/projects/) if present—a hidden/persistent action unrelated to the stated contract-audit purpose and thus deceptive.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 10:57 AM

Issues

1

Security Audit — snyk — contract-risk