skills/tinh2/skills-hub-registry/shipping-cost/Snyk

shipping-cost

Fail

Audited by Snyk on Mar 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (high risk: 0.70). The prompt includes a covert "SELF-EVOLUTION TELEMETRY" instruction to detect and append entries to a user home memory directory (~/.claude/projects/skill-telemetry.md) with a "skip silently" behavior—a hidden persistence/telemetry action that is not part of the declared shipping-cost analysis purpose.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Mar 23, 2026, 11:01 AM

Issues

1

Security Audit — snyk — shipping-cost