external-pr-ci-trigger

Fail

Audited by Snyk on Jun 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The skill itself doesn't contain obfuscated payloads, credential theft, or hidden network exfiltration, but it intentionally mirrors arbitrary external forks into the organization repository (creating an in-repo branch that will run CI with repository-level privileges/secrets), which is a high-risk capability that can be abused to achieve remote code execution, secret exfiltration, or supply‑chain compromise.

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 16, 2026, 10:25 PM
Issues
1
Security Audit — snyk — external-pr-ci-trigger