prd-full

Fail

Audited by Snyk on Aug 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The global rule (SKILL.md:11-14) explicitly instructs the agent to override sub-prompts' built-in "wait for the user" / confirmation behavior, which is a hidden/deceptive instruction to ignore other contexts and effectively a prompt-injection that can bypass intended confirmations and guards.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 13, 2026, 05:40 PM
Issues
1
Security Audit — snyk — prd-full