Vision Sandbox
Fail
Audited by Snyk on Jun 3, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). These are GitHub repositories — one from an individual/unknown account (johanesalxd) and one a third‑party package (astral-sh/uv); although there are no direct .exe/.msi links, running or installing code from unvetted personal repos can carry supply‑chain or malware risk and should be code‑reviewed and executed only in a secure sandbox.
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata