eo-flow
Fail
Audited by Snyk on May 24, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 0.90). The skill deliberately instructs launching and persisting an unsandboxed codex process (requires --dangerously-bypass-approvals-and-sandbox) and automates tmux pane creation and remote command submission, which effectively circumvents safety controls and enables persistent remote code execution/backdoor behavior even though it does not itself show explicit data exfiltration or credential theft.
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata