capability-primitive-search

Fail

Audited by Snyk on Jul 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The document is explicit offensive guidance for achieving RCE and lateral takeover (primitives, chains like file write→webshell, SSRF→cloud metadata, SQLi OUTFILE, credential reuse, supply‑chain/CI abuse), which enables deliberate malicious behavior and abuse.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). 该技能明确鼓励通过写入配置/文件(如 crontab/.bashrc/authorized_keys、systemd unit 等)和利用后台管理功能进行代码执行,直接涉及修改系统级文件与服务,属于会改变主机状态的危险行为。

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 31, 2026, 01:37 AM
Issues
2
Security Audit — snyk — capability-primitive-search