lazyweb-deep-design-research
Fail
Audited by Snyk on Jun 22, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). Most URLs are benign image or API endpoints (picsum.photos, example.com, api.openai.com), but the presence of a direct install script URL (https://www.lazyweb.com/install.sh) on an unverified domain (plus other lazyweb endpoints and a malformed "https://") is a high-risk indicator because downloading/executing remote shell scripts from an untrusted source is a common malware vector.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata