darwin-skill
Fail
Audited by Snyk on Jul 27, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The bundle is offered as a direct .zip download from a public R2 URL (pub-*.r2.dev) outside of GitHub releases or an official vendor CDN, which is a common way attackers host payloads and therefore represents a suspicious distribution vector.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata