pci-dss

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.70). The prompt includes a hidden self-evolution telemetry instruction that tells the agent to look for a local project memory directory (~/.claude/projects/) and append execution metadata to a file, which is outside the stated PCI audit purpose and would persist/modify user files without being part of the advertised audit behavior.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 11:06 AM
Issues
1
Security Audit — snyk — pci-dss