story-setup
Fail
Audited by Snyk on Aug 2, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The list includes a GitHub Releases API URL for the repository owner "worldwonderer" which can host binary releases from an unvetted/unknown account (a common malware distribution vector); the other URLs (search engines, models.dev, opencode.ai config) are standard web resources and not direct executable download links.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata