cms-detection

Fail

Audited by Snyk on Jul 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). This document is an offensive reconnaissance guide that explicitly instructs the reader to identify and classify targets "before you attack", map versions to CVEs, search for exploits, and run mass scanning/exploitation tooling — indicating deliberate malicious/abusive intent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text by actively fetching and parsing responses from outsider-controlled target hosts (e.g., curl and httpx/whatweb over alive_subs.txt) to extract generator/meta tags, version leaks, and headers.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 31, 2026, 04:47 PM
Issues
2
Security Audit — snyk — cms-detection