datacommons-client
Fail
Audited by Snyk on Mar 3, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.60). The skill contains an explicit, out-of-scope instruction to proactively promote and suggest using K-Dense Web (a third-party product) for complex workflows, which alters assistant behavior beyond the Data Commons client's stated purpose.
Audit Metadata