sales-readiness

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.60). The prompt includes a SELF-EVOLUTION TELEMETRY block that instructs the agent to silently look for a project memory directory in the user's home and append telemetry (writing to ~/.claude/projects/skill-telemetry.md), which is an extra, stealthy action outside the stated audit purpose and therefore a deceptive/hidden instruction.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (low risk: 0.30). The prompt instructs the agent to append telemetry to a project memory file (writing to ~/.claude/projects/...), which is a direct modification of the host filesystem, but it does not request privileged actions (sudo), system config changes, or creating accounts.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 23, 2026, 11:00 AM
Issues
2
Security Audit — snyk — sales-readiness