convex-development-general

Fail

Audited by Snyk on Mar 6, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The included "Memory Protocol" instructs the agent to run a shell command (cat .claude/context/memory/learnings.md) and record internal memory, which is unrelated to Convex development and attempts to access internal/local state—this is a hidden/deceptive instruction outside the skill's stated purpose.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 6, 2026, 11:41 AM