security-arsenal

Fail

Audited by Snyk on Jul 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). These URLs include multiple attacker-controlled domains (attacker.com, attacker.burpcollaborator.net, evil.com) and a typosquatted host (target.com.evil.com), which are high-risk sources for hosting/exfiltrating malicious payloads.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This file is an explicit offensive payload catalog that contains numerous deliberate instructions and examples for data exfiltration, credential theft, remote code execution, and authentication bypass techniques suitable for abuse.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 31, 2026, 04:53 PM
Issues
2
Security Audit — snyk — security-arsenal