ip-rotation
Fail
Audited by Snyk on Jun 19, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). Both URLs point to personal GitHub repositories from individual/unvetted accounts that the skill instructs you to clone and run/install (pip / python setup.py install), and installing/running code from unknown GitHub repos can execute arbitrary code at install time and is therefore suspicious.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's setup explicitly clones and installs remote repositories (https://github.com/isPique/Tor-IP-Changer and https://github.com/gr33n37/gr33n37-ip-changer), which are fetched and executed (pip install / python setup.py install) and are required dependencies used at runtime.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata