officecli-word-form
Fail
Audited by Snyk on Sep 23, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (medium risk: 0.30). The skill instructs users to download and execute
officecliinstallation scripts fromhttps://d.officecli.ai/install.shandhttps://d.officecli.ai/install.ps1, or download binaries directly from GitHub releases.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute an installation script from
https://d.officecli.ai/install.sh/install.ps1, which constitutes an unverifiable external runtime dependency with weak provenance.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata