cc-plugins

Fail

Audited by Snyk on Apr 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.85). They are raw GitHub shell install scripts intended to be piped to bash from non-verified repositories — executing them runs arbitrary code and can be used to distribute malware unless you audit the repo and script contents first.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 8, 2026, 02:29 PM
Issues
1
Security Audit — snyk — cc-plugins