ai-product-photography

Fail

Audited by Snyk on Nov 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill's visible purpose is product image generation through the inference.sh belt CLI, but the top-level install line points to a different publisher (belt-sh/cli) than the inference-sh org used for every related skill, which is a sketchy source mismatch without clear evidence of intent to attack the user.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 14, 2026, 05:50 AM
Issues
1