tzai-avatar

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). This is a personal GitHub repository referenced as the install source for executable scripts (via npx / local bash), which can be used to deliver and run untrusted code and is therefore potentially suspicious.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:49 AM
Issues
1
Security Audit — snyk — tzai-avatar