enterprise-vpn-attack
Fail
Audited by Snyk on Aug 27, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The document contains explicit, actionable exploit instructions and PoCs for pre-auth RCE, file/token/credential exfiltration, brute/enumeration techniques, and pivoting strategies against enterprise VPN appliances, indicating clearly malicious capability.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (critical risk: 1.00). The document explicitly instructs offensive actions and includes runnable exploit commands and PoC payloads (curl GET/POSTs and crafted headers/body) that perform pre-auth path traversal, file reads, command injection and web-shell creation, demonstrating intent to gain unauthorized access and a viable execution mechanism.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata