xhs-note-creator

Fail

Audited by Snyk on Aug 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These URLs include a personal GitHub repository (both the repo and .git clone URL) from an individual account and a short/redirect-style domain (xhslink.com) referenced as an external announcement — personal GitHub repos and opaque redirect links are common vectors for distributing untrusted scripts or binaries and should be treated as potentially risky until verified.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 14, 2026, 03:37 AM
Issues
1
Security Audit — snyk — xhs-note-creator