expo-mobile-app-rule

Fail

Audited by Snyk on Mar 3, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt contains a "Memory Protocol (MANDATORY)" that explicitly instructs the agent to read a local internal file (.claude/context/memory/learnings.md) and record memories — instructions unrelated to the skill's stated code-review purpose that attempt to access internal state and change agent behavior, which is a hidden/deceptive prompt injection.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 3, 2026, 02:04 PM