agent-estate

Fail

Audited by Snyk on Aug 25, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). These URLs point to a personal GitHub repository that includes shell scripts and explicit instructions to clone and execute them to install a persistent, never-stopping agent (hooks that block exits and require a special file to stop), which is high-risk behavior for malware or unwanted persistent code.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This skill intentionally implements a persistent, stop-resistant autonomous agent (hooks that block exit, a state file that must be manually removed, and a persistent ledger), which functions as a backdoor-like persistence mechanism and enables potential abuse.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 25, 2026, 10:50 AM
Issues
2
Security Audit — snyk — agent-estate