claude-configurator

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The skill intentionally provisions persistent, autonomously-invoked agents and a writable .claude control surface with broad Read/Write/Edit permissions and allowed shell execution via npm/node scripts—creating a high-risk capability for remote code execution, covert persistence, and data exfiltration (even though direct .env reads are denied).

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 05:23 AM
Issues
1
Security Audit — snyk — claude-configurator