ieee-standards-search

Fail

Audited by Snyk on Mar 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt explicitly instructs including an initScript that sets navigator.webdriver to undefined to hide that the agent is automated (evading bot detection), which is a deceptive instruction beyond the stated purpose of searching IEEE standards.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to navigate to and scrape search results from the public website standards.ieee.org (via navigate_page and evaluate_script), so it ingests third-party web content that the agent reads and uses to decide and present next actions.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 15, 2026, 07:10 AM
Issues
2