capability-primitive-search
Fail
Audited by Snyk on Jul 31, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The document is explicit offensive guidance for achieving RCE and lateral takeover (primitives, chains like file write→webshell, SSRF→cloud metadata, SQLi OUTFILE, credential reuse, supply‑chain/CI abuse), which enables deliberate malicious behavior and abuse.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). 该技能明确鼓励通过写入配置/文件(如 crontab/.bashrc/authorized_keys、systemd unit 等)和利用后台管理功能进行代码执行,直接涉及修改系统级文件与服务,属于会改变主机状态的危险行为。
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata