dcc-cli-gateway
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because they include raw GitHub install scripts (raw.githubusercontent.com/loonghao/.../install.sh and .../install.ps1) explicitly intended to be piped to shell/PowerShell and generic GitHub Releases download endpoints for binary assets (direct executable distribution from repos), which are common malware-delivery patterns — local loopback and internal host URLs shown are innocuous by themselves but do not mitigate the risk of running unverified remote installers.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata