pdf-composer

Fail

Audited by Snyk on Mar 4, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.80). The prompt embeds a "Knowledge Protocol" that instructs the skill to automatically integrate Public, Confidential, and Personal knowledge and to prioritize secrets—behavior unrelated to PDF generation that directs the agent to use sensitive data, which is a hidden/deceptive instruction outside the skill's stated purpose.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 4, 2026, 11:16 PM