401-403-bypass
Fail
Audited by Snyk on Apr 29, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). High risk: the content is an explicit, detailed methodology for bypassing 401/403 access controls (path manipulation, method/header injection, protocol downgrades and tooling) intended to evade authentication/authorization and facilitate unauthorized access.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's workflow explicitly instructs interacting with arbitrary external targets and interpreting their HTTP responses (e.g., the decision tree in SKILL.md and the automation examples in references/middleware-combo-bypass.md and references/method-header-bypass.md showing ./byp4xx.sh https://target.com/admin and python3 403bypasser.py -u https://target.com/admin), so it consumes untrusted third-party web content whose responses directly drive subsequent actions.
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata