ai2pentesttool-installer

Fail

Audited by Snyk on Jun 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). These URLs include unverified direct-download domains (https://custom-tool.com/download, https://download-link.com) and an unvetted GitHub repo (github.com/penligent/AI2PentestTool.git) which are potentially risky download sources (while api.openai.com and ara.so are legitimate and the proxy placeholders are not real download endpoints), so exercise caution and review code/hosts before running anything.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing system packages and running privileged commands (e.g., "sudo python main.py install …", "sudo apt update && apt install -y …"), which directs the agent to obtain sudo and modify the host system state.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 13, 2026, 03:14 AM
Issues
2
Security Audit — snyk — ai2pentesttool-installer