pip

Fail

Audited by Snyk on Jul 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These URLs include private PyPI registry endpoints (one with embedded credentials) which are untrusted package indexes that can host arbitrary Python packages and therefore could be used to distribute malware or otherwise compromise installations.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 8, 2026, 04:22 PM
Issues
1
Security Audit — snyk — pip