traction-eos

Fail

Audited by Snyk on Mar 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt contains unrelated, potentially covert operational instructions (prerequisites about a "design environment or API", CLI tools, steps to apply configuration, references to ${CLAUDE_SKILL_DIR} and producing configuration files) that instruct the agent to access/run or modify environment resources—behavior outside the EOS/business-coaching scope—so these are hidden/deceptive directives.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 21, 2026, 12:33 AM
Issues
1