auth0@2.6.0

CAUTION

Publisher claims: "Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher auth0 · joined 0 days agoInstalls 0Last detonated 53 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsskills/auth0/references/framework-expo/index.md:1250 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Account verification phishing language detectedskills/auth0/references/framework-android/index.md:423 · Account verification phishing language detected

AST01

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-php/index.md:1389 · Destructive file system command detected

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-expo/index.md:66 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/feature-dpop/index.md:95 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Privileged sudo commandskills/auth0/references/feature-audit/index.md:105 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/feature-audit/index.md:105 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

File permission modification commandskills/auth0/references/feature-audit/index.md:195 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-express-jwt/index.md:18 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Fake instruction boundary tagskills/auth0/references/feature-branding/index.md:238 · Fake instruction boundary tag

AST01

HIGH

Authorization escalation languageskills/auth0/references/feature-audit-pricing/index.md:250 · Authorization escalation language

AST01

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-vue/index.md:849 · Destructive file system command detected

AST05

CRITICAL

Agent configured for autonomous execution without human approvalskills/auth0/references/feature-healthcheck/index.md:64 · Agent configured for autonomous execution without human approval

AST02

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-expo/index.md:197 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-spa-js/index.md:1052 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Fake instruction boundary tagskills/auth0/references/feature-branding/index.md:240 · Fake instruction boundary tag

AST01

HIGH

npx invocation of non-well-known packageskills/auth0/references/feature-acul/index.md:449 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-expo/index.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-expo/index.md:61 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-spa-js/index.md:882 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-expo/index.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-php-api/index.md:1306 · Destructive file system command detected

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-angular/index.md:802 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-expo/index.md:73 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-express/index.md:734 · Destructive file system command detected

AST05

CRITICAL

Pipe-to-shell patternskills/auth0/references/feature-audit/index.md:105 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-flask/index.md:954 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-nextjs/index.md:721 · Destructive file system command detected

AST05

CRITICAL

Fake instruction boundary tagskills/auth0/references/tooling-cli/index.md:583 · Fake instruction boundary tag

AST01

HIGH

Authorization escalation languageskills/auth0/references/feature-audit-pricing/index.md:353 · Authorization escalation language

AST01

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-ionic-vue/index.md:1000 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Credential pass-through configurationskills/auth0/references/framework-swift/index.md:65 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-expo/index.md:208 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

HTML comment carrying imperative instructions to the agentskills/auth0/assets/healthcheck/report-template.md:32 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Fake instruction boundary tagskills/auth0/references/feature-branding/index.md:237 · Fake instruction boundary tag

AST01

HIGH

npx invocation of non-well-known packageREADME.md:31 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-vue/index.md:1007 · Destructive file system command detected

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-android/index.md:1017 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-angular/index.md:926 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patternskills/auth0/references/framework-android/index.md:1017 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Fake instruction boundary tagskills/auth0/references/tooling-cli/index.md:581 · Fake instruction boundary tag

AST01

CRITICAL

Fake instruction boundary tagskills/auth0/references/feature-branding/index.md:622 · Fake instruction boundary tag

AST01

HIGH

Access to sensitive file pathsskills/auth0/references/framework-expo/index.md:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedskills/auth0/references/framework-angular/index.md:805 · Destructive file system command detected

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express/index.md:476 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-react/index.md:138 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-react/index.md:141 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express-jwt/index.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastify/index.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastify-api/index.md:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-react/index.md:894 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express/index.md:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastify/index.md:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express/index.md:691 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-vue/index.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-go/index.md:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Account verification phishing language detectedskills/auth0/references/framework-expo/index.md:688 · Account verification phishing language detected

AST01

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express/index.md:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-go/index.md:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-go/index.md:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastify/index.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastapi-api/index.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastapi-api/index.md:1015 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastapi-api/index.md:1024 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-flask/index.md:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-flask/index.md:954 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express-jwt/index.md:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-vue/index.md:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-react/index.md:157 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-flask/index.md:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express-jwt/index.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-vue/index.md:1077 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-react/index.md:41 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-vue/index.md:187 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-react/index.md:905 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastapi-api/index.md:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-vue/index.md:980 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-express/index.md:731 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-go/index.md:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-fastapi-api/index.md:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-express-jwt/index.md:18 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-flask/index.md:637 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-express-jwt/index.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languageskills/auth0/references/framework-express-jwt/index.md:329 · Authorization escalation language

AST01

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-react/index.md:902 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-vue/index.md:185 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-vue/index.md:47 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-react/index.md:140 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-react/index.md:861 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-react/index.md:989 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-ionic-vue/index.md:979 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php/index.md:1316 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel-api/index.md:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/auth0/references/framework-php-api/index.md:288 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-java-mvc/index.md:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-java-mvc/index.md:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php/index.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-java-mvc/index.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressskills/auth0/references/framework-laravel/index.md:210 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/framework-react/index.md:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-node-auth0/index.md:297 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-kmp/index.md:466 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/auth0/references/framework-php-api/index.md:358 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandskills/auth0/references/framework-laravel-api/index.md:315 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php-api/index.md:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-php/index.md:1386 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nextjs/index.md:213 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-php-api/index.md:1303 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-node-auth0/index.md:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/auth0/references/framework-laravel-api/index.md:256 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-java-mvc/index.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php/index.md:515 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-nextjs/index.md:718 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel-api/index.md:95 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nuxt/index.md:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-react/index.md:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-react/index.md:1051 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-react/index.md:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nextjs/index.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nextjs/index.md:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-node-auth0/index.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-react/index.md:1371 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-java-mvc/index.md:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php-api/index.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php-api/index.md:57 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-vue/index.md:204 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-ionic-vue/index.md:1000 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Authorization escalation languageskills/auth0/references/framework-nuxt/index.md:418 · Authorization escalation language

AST01

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nextjs/index.md:212 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php-api/index.md:291 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-spa-js/index.md:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel-api/index.md:366 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel/index.md:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-node-auth0/index.md:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel-api/index.md:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-react/index.md:1049 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nuxt/index.md:206 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php/index.md:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-laravel-api/index.md:259 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-nuxt/index.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressskills/auth0/references/framework-laravel/index.md:190 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php/index.md:1333 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-php-api/index.md:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/framework-ionic-vue/index.md:188 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-vue/index.md:807 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-vue/index.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-ionic-vue/index.md:1000 · Remote installer piped to shell

AST07

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-spa-js/index.md:1052 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/framework-spa-js/index.md:339 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-swift/index.md:336 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-spa-js/index.md:882 · Remote installer piped to shell

AST07

MEDIUM

File type combined with upload actionskills/auth0/references/tooling-cli/index.md:709 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-android/index.md:1017 · Remote installer piped to shell

AST07

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-vue/index.md:1004 · Direct script execution from GitHub raw URL — unverified code source

AST06

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-express-jwt/index.md:18 · Remote installer piped to shell

AST07

MEDIUM

URL using raw IP addressskills/auth0/references/framework-laravel/index.md:190 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionskills/auth0/references/framework-android/index.md:1138 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/framework-vue/index.md:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-vercel/index.md:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-vue/index.md:805 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-swift/index.md:1227 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-spa-js/index.md:340 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-spa-js/index.md:882 · Direct script execution from GitHub raw URL — unverified code source

AST06

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-vercel/index.md:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-vercel/index.md:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/framework-vue/index.md:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Direct script execution from GitHub raw URLskills/auth0/references/framework-vue/index.md:846 · Direct script execution from GitHub raw URL — unverified code source

AST06

MEDIUM

URL using raw IP addressskills/auth0/references/framework-laravel/index.md:210 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/framework-spa-js/index.md:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-flask/index.md:954 · Remote installer piped to shell

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-vercel/index.md:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-cli/index.md:607 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageskills/auth0/references/tooling-cli/index.md:677 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

Remote installer piped to shellskills/auth0/references/feature-audit/index.md:105 · Remote installer piped to shell

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/tooling-vercel/index.md:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/auth0/references/framework-spa-js/index.md:1052 · Remote installer piped to shell

AST07

HIGH

Access to sensitive file pathsskills/auth0/references/framework-swift/index.md:337 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05