xhs-note-creator
Fail
Audited by Snyk on Aug 14, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). These URLs include a personal GitHub repository (both the repo and .git clone URL) from an individual account and a short/redirect-style domain (xhslink.com) referenced as an external announcement — personal GitHub repos and opaque redirect links are common vectors for distributing untrusted scripts or binaries and should be treated as potentially risky until verified.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata