competition-dpapi-credential-chain
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). 该技能明确指示记录与呈现被解密的明文凭证/密钥并将“plaintext secret”纳入证明链,要求模型在输出中直接包含机密值,存在高风险泄露。
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). 该技能文档系统性地指导如何定位并解密 DPAPI 受保护的凭证并将明文重放到浏览器/SMB/RDP 等接受端,从而实现凭证窃取、数据外泄与未授权访问,具有明显的高风险滥用意图。
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata