fabric-cli
Fail
Audited by Snyk on Apr 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.70). The prompt includes an explicit instruction to always record errors/learned preferences into a specific user-memory file (.claude/rules/fabric-cli.md), which directs the agent to persistently modify assistant/user memory (a behavior outside the documented Fabric-CLI guidance and potentially a stealthy attempt to alter agent state), so this is a deceptive/out-of-scope instruction.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata