mole

Fail

Audited by Snyk on Aug 25, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These URLs include two raw GitHub links to shell scripts (install.sh and setup-quick-launchers.sh) that are intended to be fetched and executed (curl | bash); executing remote .sh files is a high-risk distribution vector because a compromised or malicious script can deliver malware even if hosted in an otherwise legitimate repo.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly guides and automates destructive, state-changing operations on the host (permanent file deletions, app uninstalls, system optimizations that touch services, and installs/updates that may require admin rights), so it encourages compromising the machine state.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 25, 2026, 09:55 AM
Issues
2
Security Audit — snyk — mole