command_injection_test
Fail
Audited by Snyk on Feb 26, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The code deliberately includes direct remote-code-execution/backdoor patterns—shell=True subprocess calls with unsanitized input, os.system on untrusted filenames, and exec(open(...).read())—which enable arbitrary command execution and are characteristic of backdoors and RCE abuse.
Audit Metadata