darwin-skill

Fail

Audited by Snyk on Jul 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The bundle is offered as a direct .zip download from a public R2 URL (pub-*.r2.dev) outside of GitHub releases or an official vendor CDN, which is a common way attackers host payloads and therefore represents a suspicious distribution vector.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 27, 2026, 10:14 AM
Issues
1
Security Audit — snyk — darwin-skill