skills/tinh2/skills-hub-registry/incident-tracking/Snyk

incident-tracking

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.80). The prompt embeds a SELF-EVOLUTION TELEMETRY step that quietly instructs the agent to probe a local path (~/.claude/projects/) and append execution metadata to a file — a hidden, unrelated write/exfiltration instruction outside the incident-analysis purpose.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 10:58 AM

Issues

1

Security Audit — snyk — incident-tracking