codebase-analysis

Fail

Audited by Snyk on Feb 28, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). Mostly benign documentation for a code-analysis tool but it explicitly instructs bypassing sandbox protections ("dangerouslyDisableSandbox: true") and encourages iterative sessions, which is a deliberate mechanism to circumvent safety controls and enable unauthorized access or data exfiltration.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the prompt explicitly instructs bypassing the sandbox ("dangerouslyDisableSandbox: true"), which directs the agent to circumvent security controls and can lead to compromising the host state.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 28, 2026, 04:04 AM