pdf-composer
Fail
Audited by Snyk on Mar 4, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.80). The prompt embeds a "Knowledge Protocol" that instructs the skill to automatically integrate Public, Confidential, and Personal knowledge and to prioritize secrets—behavior unrelated to PDF generation that directs the agent to use sensitive data, which is a hidden/deceptive instruction outside the skill's stated purpose.
Audit Metadata