codex-cursor-limits-resetter

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill contains instructions and code snippets to download and execute a remote script via PowerShell, instructing users to bypass execution policies and antivirus protections, which represents potentially unsafe steering patterns.

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (critical risk: 1.00). The skill instructs the user to execute remote scripts via PowerShell (irm ... | iex) from an untrusted GitHub repository disguised as an AI limit resetter.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing an arbitrary third-party script from GitHub via PowerShell (irm ... | iex), presenting a weak/unknown operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill prompt instructs the agent to download and execute arbitrary remote scripts via PowerShell (irm ... | iex) and modify Windows Defender preferences (antivirus bypass), which poses a significant security risk to the machine's state.

Issues (4)

E004
CRITICAL

Prompt injection detected in skill instructions.

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 16, 2026, 03:57 AM
Issues
4