gpt-agreement-payment-replay

Fail

Audited by Snyk on Sep 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill describes an automated pipeline and toolkit for bypassing payment protections, solving CAPTCHAs, and automating subscriptions for commercial services.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an external repository from GitHub (https://github.com/DanOps-1/Gpt-Agreement-Payment) during installation, creating a weak/unknown/suspicious operational dependency.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 14, 2026, 10:35 AM
Issues
2