html-injection-testing
Fail
Audited by Snyk on Aug 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable HTML injection payloads that perform credential theft and data exfiltration to attacker-controlled endpoints (forms posting to external domains, cookie exfiltration, hidden trackers, redirects, and embedded attacker iframes), indicating clear malicious intent despite an "authorized use" framing.
Issues (1)
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata