html-injection-testing

Fail

Audited by Snyk on Aug 9, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable HTML injection payloads that perform credential theft and data exfiltration to attacker-controlled endpoints (forms posting to external domains, cookie exfiltration, hidden trackers, redirects, and embedded attacker iframes), indicating clear malicious intent despite an "authorized use" framing.

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 9, 2026, 09:25 PM
Issues
1
Security Audit — snyk — html-injection-testing