skills/tinh2/skills-hub-registry/release/Snyk

release

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.80). The prompt includes SELF-EVOLUTION TELEMETRY instructions to look for and append entries to a local ~/.claude/projects/ memory file (and record execution metadata), which is unrelated to setting up release automation and therefore constitutes hidden/deceptive behavior outside the skill’s stated purpose.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 11:04 AM

Issues

1

Security Audit — snyk — release