prompt-learning-assistant

Fail

Audited by Snyk on Jun 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). This is a GitHub repository from an untrusted/unknown user (spooky-may / hhhh124hhhh) containing executable Node.js code (index.js) with no visible trust signals (stars, releases, vetted package), so downloading or running it could execute arbitrary/malicious code and is therefore suspicious.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

  • Hidden Unicode characters detected (1 type(s) found)

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W021
MEDIUM

Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 16, 2026, 01:06 AM
Issues
2
Security Audit — snyk — prompt-learning-assistant