bstack

Fail

Audited by Snyk on Jul 1, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The issue link is benign, but the second URL points to a third‑party GitHub repo whose README/prompt explicitly tells you to clone and execute a bundled CLI (./bin/bstack bootstrap); running unvetted code from a non-official repo is a common malware vector and therefore suspicious.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 1, 2026, 03:32 PM
Issues
1
Security Audit — snyk — bstack