file-path-traversal

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly directs extraction and reporting of file contents (including private keys, /etc/shadow, wp-config.php, /proc/self/environ, etc.), which requires the LLM to handle and potentially output secret values verbatim as "exploitation proof".

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This document is high-risk: it contains explicit payloads and step-by-step instructions to perform file path traversal, exfiltrate sensitive files/credentials, and escalate to remote code execution.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 09:42 AM
Issues
2
Security Audit — snyk — file-path-traversal