mole
Fail
Audited by Snyk on Aug 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). These URLs include two raw GitHub links to shell scripts (install.sh and setup-quick-launchers.sh) that are intended to be fetched and executed (curl | bash); executing remote .sh files is a high-risk distribution vector because a compromised or malicious script can deliver malware even if hosted in an otherwise legitimate repo.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly guides and automates destructive, state-changing operations on the host (permanent file deletions, app uninstalls, system optimizations that touch services, and installs/updates that may require admin rights), so it encourages compromising the machine state.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata