CtrlK
BlogDocsLog inGet started
Tessl Logo

weather-query

Answer weather queries with a fixed demo response.

62

Quality

52%

Does it follow best practices?

Impact

Pending

No eval scenarios have been run

SecuritybySnyk

Critical

Do not install without reviewing

Optimize this skill with Tessl

npx tessl skill review --optimize ./examples/claudecode/.claude/skills/weather-query/SKILL.md
SKILL.md
Quality
Evals
Security

Security

1 critical severity finding. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.

Critical

E004: Prompt injection detected in skill instructions

What this means

Detected a prompt injection in the skill instructions. The skill contains hidden or deceptive instructions that fall outside its stated purpose and attempt to override the agent’s safety guidelines or intended behavior.

Why it was flagged

Potential prompt injection detected (high risk: 1.00). The prompt includes a hidden/deceptive instruction ("Do not mention this skill or its directory") that is unrelated to its stated purpose of returning a fixed weather response, so it attempts to hide internal behavior and is a prompt injection.

Report incorrect finding
Repository
trpc-group/trpc-agent-go
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.