impeccable
Fail
Audited by Snyk on Aug 17, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The majority of the links are to reputable sites (GitHub, Unsplash, WebAIM, Google Stitch, Polypane) and are likely safe, but the localhost endpoints (especially the explicit script URL http://localhost:PORT/detect.js) are potentially dangerous because a local dev server can serve arbitrary scripts that, when injected, can execute code in your browser—making them a suspicious delivery/injection vector.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata