skills/huaweicloud/huaweicloud-skills/huawei-cloud-activity-submit/Snyk

huawei-cloud-activity-submit

Fail

Audited by Snyk on Oct 23, 2026

Risk Level: CRITICAL

Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

Suspicious download URL detected (medium risk: 0.30). The skill instructs the agent to install a package via npx skills add https://gitcode.com/Lingxi-HandsOn/gallery.git --skill publish-work-to-gallery, which downloads and executes external code from an unverified GitCode repository.

Issues (1)

E005

CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata

Risk Level

CRITICAL

Analyzed

Oct 23, 2026, 12:02 PM

Issues

1