claude-code

Fail

Audited by Snyk on Aug 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). These URLs point to untrusted plugin distribution channels — a direct plugin ZIP on example.com and a generic/unverified GitHub repository homepage — which are common vectors for distributing malicious plugins or executable content.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 22, 2026, 10:39 AM
Issues
1
Security Audit — snyk — claude-code