claude-code
Fail
Audited by Snyk on Aug 22, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). These URLs point to untrusted plugin distribution channels — a direct plugin ZIP on example.com and a generic/unverified GitHub repository homepage — which are common vectors for distributing malicious plugins or executable content.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata