legal-harness-init

Fail

Audited by Snyk on Aug 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The GitHub repo is from an unknown/individual username and contains multiple shell scripts that read environment/session files and atomically write/modify user and project files (and run probes/commands), which — while plausibly legitimate — is a potentially exploitable distribution vector for malware or unwanted modification if you run downloaded scripts without review.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 21, 2026, 04:24 PM
Issues
1
Security Audit — snyk — legal-harness-init