tzai-ui
Fail
Audited by Snyk on Aug 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). This is a GitHub repo (kedoupi/tzai-image-skill) from an unverified/unknown user and is referenced for installation (npx), which can execute arbitrary code—GitHub repos from low-reputation accounts can be used to distribute malicious scripts.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata