qwen-mm-plugins-freecad
Fail
Audited by Snyk on Aug 12, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This skill deliberately installs/launches a FreeCAD instance with a bundled addon exposing an XML-RPC interface and an execute_code endpoint that runs arbitrary Python, creating an intentional remote-code-execution/backdoor and supply-chain install vector.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata