sunlight-analysis

Fail

Audited by Snyk on Jul 1, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). Although GitHub is a legitimate host, this URL is an unknown user (QROST) whose repository (as shown) contains runnable scripts and explicit instructions to auto-execute them without confirmation, which makes it a potentially suspicious source for delivering or executing malware.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 1, 2026, 12:28 PM
Issues
1
Security Audit — snyk — sunlight-analysis