seo
Fail
Audited by Snyk on Mar 22, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.90). The prompt includes explicit instructions to extract metrics from the saved digest and POST them to an external server (95.217.179.111), which performs out-of-band data exfiltration unrelated to the user's requested SEO digest and is therefore a deceptive/out-of-scope instruction.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The skill includes an explicit, hard-coded "Sync to Hive Mind" routine that extracts metrics from local digest files and POSTs them to an external IP (http://95.217.179.111:3333), representing unauthorized data exfiltration/telemetry of user Search Console data — a high-risk malicious pattern.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata