← back to godmode

SkillSpector · godmode

independent scanner by NVIDIA · skill by q2805187159 · how it works ↗

FAILmax severity: CRITICALrisk score: 100

A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence att…; Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.; compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.; +11 more

scanned 2026-08-23

Findings (20)

CRITICALDangerous Code Executionconfidence: 0.95

A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.

scripts/auto_jailbreak.py

HIGHDangerous Code Executionconfidence: 0.85

Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.

scripts/auto_jailbreak.py

CRITICALDangerous Code Executionconfidence: 0.95

A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.

scripts/auto_jailbreak.py

HIGHDangerous Code Executionconfidence: 0.85

Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.

scripts/auto_jailbreak.py

MEDIUMDangerous Code Executionconfidence: 0.65

compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.

scripts/auto_jailbreak.py

MEDIUMDangerous Code Executionconfidence: 0.65

compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.

scripts/auto_jailbreak.py

CRITICALDangerous Code Executionconfidence: 0.95

A dangerous execution chain combines code execution (exec/eval) with a dynamic source (network, encoded data, dynamic import), creating a high-confidence attack vector.

scripts/load_godmode.py

HIGHDangerous Code Executionconfidence: 0.85

Direct exec() call allows arbitrary code execution. An attacker can inject code that runs with the full privileges of the process.

scripts/load_godmode.py

MEDIUMDangerous Code Executionconfidence: 0.65

compile() creates code objects from strings. When combined with exec()/eval(), it enables obfuscated code execution.

scripts/load_godmode.py

HIGHData Flowconfidence: 0.8

Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.

scripts/auto_jailbreak.py

HIGHData Flowconfidence: 0.8

Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.

scripts/auto_jailbreak.py

MEDIUMData Flowconfidence: 0.65

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/auto_jailbreak.py

MEDIUMData Flowconfidence: 0.65

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/auto_jailbreak.py

MEDIUMData Flowconfidence: 0.65

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/auto_jailbreak.py

HIGHData Flowconfidence: 0.8

Data flows directly from a source (env vars, files, network) to a sink (network output, exec, file write) without intermediate validation.

scripts/load_godmode.py

MEDIUMMCP Least Privilegeconfidence: 0.7

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

HIGHAnti-Refusalconfidence: 0.85

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

SKILL.md

HIGHAnti-Refusalconfidence: 0.85

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

SKILL.md

HIGHAnti-Refusalconfidence: 0.9

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

SKILL.md

HIGHAnti-Refusalconfidence: 0.9

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

SKILL.md

What the verdicts mean

SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.

PASS

Overall severity LOW (risk score in the safe range)

CAUTION

Overall severity MEDIUM

WARNING

Overall severity HIGH

FAILthis skill

Overall severity CRITICAL

INCONCLUSIVE

Scan could not complete