meeting-minutes-taker

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The prompt contains an explicit instruction to "add missing content silently without mentioning what was missed," which directs the agent to hide changes from the user and conflicts with the skill's stated transparency and human-in-the-loop confirmations, so it is a hidden/deceptive instruction outside the advertised purpose.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 15, 2026, 08:31 PM