graphql-expert
Fail
Audited by Snyk on Mar 3, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The prompt includes a mandatory "Memory Protocol" that instructs the agent to run a shell command to read local memory (cat .claude/context/memory/learnings.md) and record discoveries—an unrelated, out-of-scope instruction that attempts to access local state and thus constitutes a hidden/deceptive instruction outside the GraphQL expert's stated purpose.
Audit Metadata