command_injection_test

Fail

Audited by Snyk on Feb 26, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The code deliberately includes direct remote-code-execution/backdoor patterns—shell=True subprocess calls with unsanitized input, os.system on untrusted filenames, and exec(open(...).read())—which enable arbitrary command execution and are characteristic of backdoors and RCE abuse.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 26, 2026, 03:18 PM