Comind

AdvisoryAudited by Static analysis on May 10, 2026.

Overview

Detected: suspicious.generated_source_template_injection

Findings (1)

critical

suspicious.generated_source_template_injection

Location
SKILL.md:317
Finding
User-controlled placeholder is embedded directly into generated source code.