codex-cursor-limits-resetter
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill contains instructions and code snippets to download and execute a remote script via PowerShell, instructing users to bypass execution policies and antivirus protections, which represents potentially unsafe steering patterns.
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (critical risk: 1.00). The skill instructs the user to execute remote scripts via PowerShell (
irm ... | iex) from an untrusted GitHub repository disguised as an AI limit resetter.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing an arbitrary third-party script from GitHub via PowerShell (
irm ... | iex), presenting a weak/unknown operational dependency.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill prompt instructs the agent to download and execute arbitrary remote scripts via PowerShell (
irm ... | iex) and modify Windows Defender preferences (antivirus bypass), which poses a significant security risk to the machine's state.
Issues (4)
E004
CRITICALPrompt injection detected in skill instructions.
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata