skill-manager

Fail

Audited by Snyk on May 9, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). These URLs point to raw install scripts (.sh, .bat, .py) hosted in an unverified GitHub repo and the prompt explicitly instructs piping them to bash/cmd — running remote scripts from an unknown account without review is high risk and commonly used to distribute malware.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 9, 2026, 04:54 PM
Issues
1