humanizador

Fail

Audited by Snyk on Aug 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The repository URL https://github.com/almeidamarcell/humanizador.git points to a personal/unvetted GitHub repo that the README instructs users to clone and run locally (an untrusted code-distribution vector), while the two Wikipedia links are official and benign.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). O texto outsider inserido pelo usuário em “Humanize esse texto: [seu texto]” (ou cole seu texto em /humanizador) é ingerido diretamente na workflow de “Leia o texto de entrada…”, pois a skill identifica padrões e reescreve o conteúdo recebido em runtime.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 15, 2026, 06:18 PM
Issues
2
Security Audit — snyk — humanizador