self-monitor
Fail
Audited by Snyk on Jun 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). This is a GitHub repository from an unrecognized personal account (spooky-may) that distributes a third‑party "skill" installed/run via npx/clawhub—while not a direct .exe link, it is unvetted code that can execute arbitrary actions and therefore represents a potential malware distribution risk.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata