eo-flow

Fail

Audited by Snyk on May 24, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The skill deliberately instructs launching and persisting an unsandboxed codex process (requires --dangerously-bypass-approvals-and-sandbox) and automates tmux pane creation and remote command submission, which effectively circumvents safety controls and enables persistent remote code execution/backdoor behavior even though it does not itself show explicit data exfiltration or credential theft.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

  • Hidden Unicode characters detected (1 type(s) found)

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W021
MEDIUM

Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 24, 2026, 04:05 AM
Issues
2
Security Audit — snyk — eo-flow