audit-security
Fail
Audited by Snyk on Jul 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). This URL points to a personal GitHub repository referenced as an install source (npx install) — installing from an unvetted/individual GitHub account can execute arbitrary code and is higher-risk than official package managers or well-known org repos.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata