document-builder

Fail

Audited by Snyk on Jul 11, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). This repository contains an agent-skill design doc that explicitly instructs embedding and executing shell commands (dynamic "shell-script injection") and creating companion scripts that access environment variables — patterns that enable remote code execution and data exfiltration if executed by an agent.

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 11, 2026, 09:05 AM
Issues
1
Security Audit — snyk — document-builder