prompt-learning-assistant
Fail
Audited by Snyk on Jun 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). This is a GitHub repository from an untrusted/unknown user (spooky-may / hhhh124hhhh) containing executable Node.js code (index.js) with no visible trust signals (stars, releases, vetted package), so downloading or running it could execute arbitrary/malicious code and is therefore suspicious.
MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
- Hidden Unicode characters detected (1 type(s) found)
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W021
MEDIUMHidden or invisible Unicode characters detected (potential obfuscation or prompt injection).
Audit Metadata