isolapurr-user-operations
Fail
Audited by Snyk on Jul 24, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). The links point to downloadable installer scripts (.sh and .ps1) hosted under a personal GitHub account (IvanLi-CN) — direct execution of remote scripts from an unverified/unknown release user is a high-risk distribution vector for malware.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and running remote installer scripts (curl ... https://github.com/IvanLi-CN/isolappurr-usb-hub/releases/latest/download/install-isolapurr-host.sh then bash, and Invoke-WebRequest ... https://github.com/IvanLi-CN/isolappurr-usb-hub/releases/latest/download/install-isolapurr-host.ps1 then powershell), so these URLs are runtime dependencies that execute remote code.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata