ralph-loop
Fail
Audited by Snyk on Jul 14, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The repo templates include explicit instructions and tooling that bypass permission checks (claude --dangerously-skip-permissions), instruct an LLM to read project files via many subagents, and automatically stage/commit/push all changes (git add -A; git push), which together create a clear capability for unintended data exfiltration and remote modification of the repository.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata