story-setup

Fail

Audited by Snyk on Aug 2, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The list includes a GitHub Releases API URL for the repository owner "worldwonderer" which can host binary releases from an unvetted/unknown account (a common malware distribution vector); the other URLs (search engines, models.dev, opencode.ai config) are standard web resources and not direct executable download links.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 2, 2026, 09:41 PM
Issues
1