using-superpowers

Fail

Audited by Snyk on Jun 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). The skill enforces unconditional invocation of opaque/hidden skill content (disallowing direct reads) while exposing tools that can spawn agents, run shell commands, and make network requests, creating a high-risk supply‑chain/backdoor/exfiltration vector even though no explicit payload is present in the files shown.

Issues (1)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 21, 2026, 05:12 AM
Issues
1