email-template-generator-skill

Fail

Audited by Snyk on Mar 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.70). The prompt includes an "Emit Outcome Sidecar" instruction to write analytics (timestamps, session_id, metrics, status) to a local filesystem path, which is an operational side-effect outside the skill's advertised purpose of generating email templates and can lead to data persistence/exfiltration, so it is a hidden/deceptive instruction beyond scope.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 22, 2026, 06:50 PM
Issues
1