zhuoran-selfie

Fail

Audited by Snyk on Mar 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The package contains explicit tooling to upload user/reference images to external AI endpoints and automatically generate and send persona-consistent images and sexual "undress" deepfake videos (targeting a hard-coded subject), enabling privacy-invasive non-consensual deepfakes and automated exfiltration/redistribution of images—this is high-risk abuse/intent rather than an ordinary benign utility.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 8, 2026, 02:25 AM