cc-plugins
Fail
Audited by Snyk on Apr 8, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.85). They are raw GitHub shell install scripts intended to be piped to bash from non-verified repositories — executing them runs arbitrary code and can be used to distribute malware unless you audit the repo and script contents first.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata