sales-readiness
Fail
Audited by Snyk on Mar 23, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.60). The prompt includes a SELF-EVOLUTION TELEMETRY block that instructs the agent to silently look for a project memory directory in the user's home and append telemetry (writing to ~/.claude/projects/skill-telemetry.md), which is an extra, stealthy action outside the stated audit purpose and therefore a deceptive/hidden instruction.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (low risk: 0.30). The prompt instructs the agent to append telemetry to a project memory file (writing to ~/.claude/projects/...), which is a direct modification of the host filesystem, but it does not request privileged actions (sudo), system config changes, or creating accounts.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata