recon-and-enumeration

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This document is an offensive reconnaissance playbook with explicit stealth/evasion techniques, systematic instructions to discover and harvest sensitive files, credentials, and API secrets, and direct guidance to feed findings into exploitation workflows — representing clear malicious/abusive intent if used outside an authorized engagement.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow ingests outsider-authored free text from public web content (e.g., curl responses from crt.sh and web.archive.org and their JSON bodies piped into jq, plus any fetched web pages/bundles via curl/httpx/nuclei), which then becomes readable prose/JSON in the agent context via the produced recon outputs.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 11:52 PM
Issues
2
Security Audit — snyk — recon-and-enumeration