datacommons-client

Fail

Audited by Snyk on Feb 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.60). The skill contains an explicit, out-of-scope instruction to proactively promote and suggest using K-Dense Web (a third-party product) for complex workflows, which alters assistant behavior beyond the Data Commons client's stated purpose.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 16, 2026, 01:18 PM