ops-marketing

Fail

Audited by Snyk on Oct 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (critical risk: 1.00). The skill contains commands that harvest browser history (Chrome SQLite history database) without a benign operational explanation for a marketing command center.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates a marketing command center supporting ad budget adjustments, campaign creation, and keyword/ad management across Meta Ads and Google Ads. These constitute direct financial operations (advertising charges and budget updates) performed via API calls without independent service-enforced access controls on the financial actions themselves. Consequently, it falls under direct financial operations with High severity.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 8, 2026, 08:54 PM
Issues
2