ninjaone-specialist

Fail

Audited by Snyk on May 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). Although most of the content is legitimate operational guidance for NinjaOne PowerShell scripts, it explicitly includes backdoor-capable items (notably "crear_usuario_oculto.ps1
  • Usuario SSH oculto" and SSH deployment helpers) that enable creating hidden persistent remote access accounts and therefore represent intentional malicious/backdoor functionality.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). El prompt contiene plantillas y ejemplos que requieren privilegios de administrador (#+Requires -RunAsAdministrator) y explícitamente incluye scripts como "crear_usuario_oculto.ps1" y "ninjaone_deploy_ssh.ps1" que crean usuarios/configuran SSH y por tanto instruyen a modificar el estado del sistema con privilegios elevados.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 15, 2026, 12:37 PM
Issues
2
Security Audit — snyk — ninjaone-specialist