mcp-hass
Fail
Audited by Snyk on Jun 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.75). The link is to a personal GitHub repository (an unknown user) hosting a third‑party "skill" intended to be installed/run (via npx/clawhub), which is a common vector for distributing malicious scripts and lacks signs of a reputable, well‑vetted source.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata