ops-marketing
Fail
Audited by Snyk on Oct 8, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (critical risk: 1.00). The skill contains commands that harvest browser history (Chrome SQLite history database) without a benign operational explanation for a marketing command center.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates a marketing command center supporting ad budget adjustments, campaign creation, and keyword/ad management across Meta Ads and Google Ads. These constitute direct financial operations (advertising charges and budget updates) performed via API calls without independent service-enforced access controls on the financial actions themselves. Consequently, it falls under direct financial operations with High severity.
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata