codex-cursor-claude-usage-resetter

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill contains instructions and remote script execution commands intended to bypass usage limits and free trial restrictions on commercial software.

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill instructs users to download and execute an external PowerShell script from a GitHub repository via irm ... | iex to perform unauthorized usage resets.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs execution of a script fetched from an arbitrary personal GitHub repository via iex, introducing a weak and untrusted operational dependency.

Issues (3)

E004
CRITICAL

Prompt injection detected in skill instructions.

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 16, 2026, 03:57 AM
Issues
3