401-403-bypass

Fail

Audited by Snyk on Apr 29, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). High risk: the content is an explicit, detailed methodology for bypassing 401/403 access controls (path manipulation, method/header injection, protocol downgrades and tooling) intended to evade authentication/authorization and facilitate unauthorized access.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's workflow explicitly instructs interacting with arbitrary external targets and interpreting their HTTP responses (e.g., the decision tree in SKILL.md and the automation examples in references/middleware-combo-bypass.md and references/method-header-bypass.md showing ./byp4xx.sh https://target.com/admin and python3 403bypasser.py -u https://target.com/admin), so it consumes untrusted third-party web content whose responses directly drive subsequent actions.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 29, 2026, 01:55 PM
Issues
2