contract-test

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The prompt includes a "SELF-EVOLUTION TELEMETRY" section that instructs the agent to look for and append to a local project memory file (~/.claude/projects/.../skill-telemetry.md), which is a hidden side-effect and data-write action outside the skill's advertised purpose of generating and verifying contract tests.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 11:06 AM
Issues
1
Security Audit — snyk — contract-test