agent-estate
Fail
Audited by Snyk on Aug 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These URLs point to a personal GitHub repository that includes shell scripts and explicit instructions to clone and execute them to install a persistent, never-stopping agent (hooks that block exits and require a special file to stop), which is high-risk behavior for malware or unwanted persistent code.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This skill intentionally implements a persistent, stop-resistant autonomous agent (hooks that block exit, a state file that must be manually removed, and a persistent ledger), which functions as a backdoor-like persistence mechanism and enables potential abuse.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata