competition-relay-coercion-chain
Fail
Audited by Snyk on Mar 31, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). This skill explicitly requires preserving relay transcripts, captured authentication, coerced identities, and a "replayable" coercion-to-acceptance sequence, which would necessitate including raw authentication tokens/hashes/tickets or other secret values verbatim in output, creating an exfiltration risk.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). 该技能明确描述了强制认证、捕获与中继认证(例如 NTLM 强制认证与中继链)、以及将中继认证转化为权限或程序执行的流程,直接提供了窃取凭证、进行中继攻击和提权的可操作方法,属于高风险滥用能力。
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata