file-path-traversal
Fail
Audited by Snyk on Aug 10, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly directs extraction and reporting of file contents (including private keys, /etc/shadow, wp-config.php, /proc/self/environ, etc.), which requires the LLM to handle and potentially output secret values verbatim as "exploitation proof".
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This document is high-risk: it contains explicit payloads and step-by-step instructions to perform file path traversal, exfiltrate sensitive files/credentials, and escalate to remote code execution.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata