bg-jobs

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). Yes — a direct ZIP from a generic/untrusted host (example.com/large_file.zip) and a GitHub repo referenced for direct install from an unfamiliar/low-reputation account (github.com/lirrensi/agent-sommelier) are suspicious because they lack provenance and could deliver arbitrary/malicious code.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 09:43 PM
Issues
1
Security Audit — snyk — bg-jobs