baoyu-multimedia-suite

Fail

Audited by Snyk on Aug 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The repository includes explicit, deliberate techniques to bypass web platforms' anti-automation defenses and to drive actions using persistent logged-in browser profiles and system-level clipboard/keystroke injection, which enable automated posting under authenticated sessions and can be abused for unauthorized or covert account activity.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required runtime path “/baoyu-comic posts/turing-story/source.md” indicates the agent will read user-provided free text from a local markdown/source file (e.g., path/to/content.md/source.md) and feed it into the comic generation workflow, so outsiders can submit arbitrary text that the LLM ingests.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 16, 2026, 10:55 PM
Issues
2