setup-multiplayer-services
Fail
Audited by Snyk on Aug 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The prompt instructs the agent to use an internal documentation map (llms.txt) as authoritative but explicitly orders the agent to "Never mention the
llms.txtfilename to the user," which is a hidden/deceptive instruction to conceal provenance outside the skill's stated purpose.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent at runtime to treat the external documentation map as authoritative and use it over memory—fetching and following https://docs.unity.com/en-us/mps-sdk/llms.txt would directly control the agent's prompts and behavior.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata