windows-packaging-publish
Fail
Audited by Snyk on Aug 8, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). Most URLs are official Microsoft/Azure signing, timestamp, and schema endpoints, but the two example.com links are direct .appinstaller/.msix download targets on an untrusted/placeholder domain and therefore could be used to distribute executable packages.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata