competition-relay-coercion-chain

Fail

Audited by Snyk on Mar 31, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). This skill explicitly requires preserving relay transcripts, captured authentication, coerced identities, and a "replayable" coercion-to-acceptance sequence, which would necessitate including raw authentication tokens/hashes/tickets or other secret values verbatim in output, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). 该技能明确描述了强制认证、捕获与中继认证(例如 NTLM 强制认证与中继链)、以及将中继认证转化为权限或程序执行的流程,直接提供了窃取凭证、进行中继攻击和提权的可操作方法,属于高风险滥用能力。

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 31, 2026, 12:16 PM
Issues
2