legal-harness-init
Fail
Audited by Snyk on Aug 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The GitHub repo is from an unknown/individual username and contains multiple shell scripts that read environment/session files and atomically write/modify user and project files (and run probes/commands), which — while plausibly legitimate — is a potentially exploitable distribution vector for malware or unwanted modification if you run downloaded scripts without review.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata