skills/winsorllc/upgraded-carnival/pr-description-generator/Snyk

pr-description-generator

Fail

Audited by Snyk on Sep 30, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

Potential prompt injection detected (medium risk: 0.30). The skill contains a utility script for sending progress report emails via Gmail SMTP, which transmits local credentials externally without an unrelated purpose or deceptive mechanism.

Issues (1)

E004

CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Sep 30, 2026, 12:06 PM

Issues

1