tzai-cover

Fail

Audited by Snyk on Aug 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). This URL points to a third‑party GitHub repository that is referenced as the install/source for an npx skill (which can execute arbitrary code), so without independent verification it should be treated as suspicious.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 13, 2026, 02:20 AM
Issues
1
Security Audit — snyk — tzai-cover