enterprise-vpn-attack

Fail

Audited by Snyk on Aug 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The document contains explicit, actionable exploit instructions and PoCs for pre-auth RCE, file/token/credential exfiltration, brute/enumeration techniques, and pivoting strategies against enterprise VPN appliances, indicating clearly malicious capability.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (critical risk: 1.00). The document explicitly instructs offensive actions and includes runnable exploit commands and PoC payloads (curl GET/POSTs and crafted headers/body) that perform pre-auth path traversal, file reads, command injection and web-shell creation, demonstrating intent to gain unauthorized access and a viable execution mechanism.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 27, 2026, 05:31 AM
Issues
2
Security Audit — snyk — enterprise-vpn-attack