acidrain-security-testing-scripts

Fail

Audited by Snyk on Aug 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). The GitHub clone URL points to an unknown user repository being recommended for direct download/clone—unvetted code from an unfamiliar account can deliver malicious scripts or unsafe tooling.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The repository contains explicit data-exfiltration code (cookie exfiltration), encoded/eval execution patterns, and automated scanning/external request logic that can be readily abused as backdoor or exfiltration functionality if used against unauthorized targets.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 23, 2026, 03:32 PM
Issues
2
Security Audit — snyk — acidrain-security-testing-scripts