story-long-scan

Fail

Audited by Snyk on Aug 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). Repository documentation explicitly instructs using fake/paid "假追" metrics to manipulate platform recommendation systems, which is deliberate abusive behavior (fraudulent manipulation of ranking/metrics).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). Required runtime workflow uses scraper scripts (e.g., scripts/qidian-rank-scraper.js, scripts/fanqie-rank-scraper.js, scripts/qimao-rank-scraper.js, scripts/jjwxc-rank-scraper.js, scripts/ciweimao-rank-scraper.js) to fetch and ingest free-form outsider-authored text from third-party platform pages (book titles/author names/intro/metadata) into the LLM during analysis.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 20, 2026, 02:20 AM
Issues
2