lesson-hour-check-free
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (medium risk: 0.30). The skill instructs users to install an optional paid upgrade package via an Alipay payment agent command (
npx -y @alipay/agent-payment@latest install), which downloads and executes third-party code from an unverified online registry package source.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata