skills/tinh2/skills-hub-registry/mobile-test/Snyk

mobile-test

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.80). The prompt includes explicit instructions to probe the user's home (~/.claude/projects/) and append telemetry to a project memory file — an unrelated data-access/persistence action outside the mobile-test skill's stated purpose, constituting a hidden/deceptive behavior risk.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 11:06 AM

Issues

1

Security Audit — snyk — mobile-test