hunt-graphql

Fail

Audited by Snyk on Aug 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The document provides explicit, step-by-step offensive guidance and ready-to-run payloads (curl commands, mutation examples, batching/race techniques) for exploiting GraphQL vulnerabilities to gain persistent unauthorized access and exfiltrate data, which is clearly malicious or materially harmful.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 27, 2026, 05:31 AM
Issues
1
Security Audit — snyk — hunt-graphql