prd-v06-environment-setup
Fail
Audited by Snyk on May 12, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). Three of the links (nodejs.org and the raw.githubusercontent.com nvm install script) point to well-known, trusted vendors/sources and are low-risk, but mise.jdx.dev (and its direct install.sh) is an untrusted third-party domain offering a direct shell installer — a high-risk pattern (avoid piping/running without auditing).
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata