agent-skill-authoring
Fail
Audited by Snyk on Aug 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). The set is mostly benign (official RFC, GitHub repo, example placeholders), but the http://169.254.169.254/… entry is high-risk because it points at a link-local cloud metadata address commonly abused in redirect/SSRF scenarios.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata