inngest-local

Fail

Audited by Snyk on Sep 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill instructs the user to pipe a remote script execution from joelclaw.com directly into bash, presenting an untrusted third-party installation vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs the execution of an unauthenticated remote shell script from an arbitrary third-party domain (joelclaw.com) during setup, constituting a weak external operational dependency.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 23, 2026, 05:02 PM
Issues
2
Security Audit — snyk — inngest-local