budget-check
Fail
Audited by Snyk on Jul 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The ccusage GitHub repository is an external, individual-maintained project the skill invokes to run local commands (potentially executing arbitrary code), which is a supply-chain risk; the yon.younndai.com guide is an internal doc and not flagged.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata