dcc-cli-gateway

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because they include raw GitHub install scripts (raw.githubusercontent.com/loonghao/.../install.sh and .../install.ps1) explicitly intended to be piped to shell/PowerShell and generic GitHub Releases download endpoints for binary assets (direct executable distribution from repos), which are common malware-delivery patterns — local loopback and internal host URLs shown are innocuous by themselves but do not mitigate the risk of running unverified remote installers.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 07:26 PM
Issues
1