tzai-onboarding

Fail

Audited by Snyk on Aug 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). This points to a personal GitHub repository (kedoupi/tzai-image-skill) that the skill instructs you to install/run (via npx and executing a script), so installing and executing code from an unknown account is potentially risky and could distribute malware.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 10, 2026, 02:50 AM
Issues
1
Security Audit — snyk — tzai-onboarding