bg-jobs
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). Yes — a direct ZIP from a generic/untrusted host (example.com/large_file.zip) and a GitHub repo referenced for direct install from an unfamiliar/low-reputation account (github.com/lirrensi/agent-sommelier) are suspicious because they lack provenance and could deliver arbitrary/malicious code.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata