cartog-install

Fail

Audited by Snyk on Aug 7, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). This URL is a direct link to a shell installer (install.sh) on a project-hosted domain — downloading and executing remote .sh files from non-standard domains is high-risk because they can contain arbitrary code and the source may be unvetted.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 7, 2026, 09:31 AM
Issues
1
Security Audit — snyk — cartog-install