preact-weapon

Fail

Audited by Snyk on Jul 25, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). All listed links are official project docs or GitHub sources except the direct CDN script URL (https://cdn.example.com/widget.iife.js), which is a remote IIFE bundle served from an arbitrary CDN and could be used to deliver malicious JavaScript to embed hosts.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 25, 2026, 03:24 AM
Issues
1
Security Audit — snyk — preact-weapon