clean-history
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The prompt explicitly instructs omitting author/contributor attribution (e.g., "Never add yourself as an author" and "Never include 'Generated with Claude Code' or 'Co-Authored-By'"), which is a deceptive instruction to hide provenance and is not necessary for the stated goal of producing reviewer-friendly commit history.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt explicitly instructs using "git commit --no-verify" to bypass pre-commit hooks (a security/check mechanism) and directs modifying repository state (creating branches/commits), so it encourages bypassing safeguards even though it doesn't request sudo or system-file changes.
Audit Metadata