blue-cloudy-clean-modern

Fail

Audited by Snyk on Nov 11, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The demo hides its entire page source in a base64 string decoded at runtime and injected via srcdoc, which conceals what the reference actually contains, but the decoded content is ordinary design markup with no exfiltration, deception, or malicious intent toward the user.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 11, 2026, 04:45 PM
Issues
1