graphql-expert

Fail

Audited by Snyk on Mar 3, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The prompt includes a mandatory "Memory Protocol" that instructs the agent to run a shell command to read local memory (cat .claude/context/memory/learnings.md) and record discoveries—an unrelated, out-of-scope instruction that attempts to access local state and thus constitutes a hidden/deceptive instruction outside the GraphQL expert's stated purpose.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 3, 2026, 02:04 PM