setup-multiplayer-services

Fail

Audited by Snyk on Aug 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt instructs the agent to use an internal documentation map (llms.txt) as authoritative but explicitly orders the agent to "Never mention the llms.txt filename to the user," which is a hidden/deceptive instruction to conceal provenance outside the skill's stated purpose.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent at runtime to treat the external documentation map as authoritative and use it over memory—fetching and following https://docs.unity.com/en-us/mps-sdk/llms.txt would directly control the agent's prompts and behavior.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 13, 2026, 04:49 PM
Issues
2
Security Audit — snyk — setup-multiplayer-services