Back to skill
Skillv1.0.0
Static analysis security
API Contract Tester · Deterministic local checks for risky code patterns and metadata mismatches.
Scanner verdict
SuspiciousApr 28, 2026, 11:45 PM
- Summary
- Detected: suspicious.generated_source_template_injection
- Reason codes
- suspicious.generated_source_template_injection
- Engine
- v2.4.2
Evidence
criticalSKILL.md:39
User-controlled placeholder is embedded directly into generated source code.
suspicious.generated_source_template_injection