competition-dpapi-credential-chain

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). 该技能明确指示记录与呈现被解密的明文凭证/密钥并将“plaintext secret”纳入证明链,要求模型在输出中直接包含机密值,存在高风险泄露。

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). 该技能文档系统性地指导如何定位并解密 DPAPI 受保护的凭证并将明文重放到浏览器/SMB/RDP 等接受端,从而实现凭证窃取、数据外泄与未授权访问,具有明显的高风险滥用意图。

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 03:16 AM
Issues
2
Security Audit — snyk — competition-dpapi-credential-chain