ninjaone-specialist
Fail
Audited by Snyk on May 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). Although most of the content is legitimate operational guidance for NinjaOne PowerShell scripts, it explicitly includes backdoor-capable items (notably "crear_usuario_oculto.ps1
- Usuario SSH oculto" and SSH deployment helpers) that enable creating hidden persistent remote access accounts and therefore represent intentional malicious/backdoor functionality.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). El prompt contiene plantillas y ejemplos que requieren privilegios de administrador (#+Requires -RunAsAdministrator) y explícitamente incluye scripts como "crear_usuario_oculto.ps1" y "ninjaone_deploy_ssh.ps1" que crean usuarios/configuran SSH y por tanto instruyen a modificar el estado del sistema con privilegios elevados.
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata