linux-server-ssh
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill's prereqs run a remote installer with shell execution ("curl -fsSL https://box.ascii.dev/install | sh"), which fetches and immediately executes external code at runtime and is required for the skill to function.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs the agent/operator to run sudo commands (e.g., apt-get install and systemctl enable --now nginx) and advertises root access, which modifies system-level files and services on the host.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata