prd-v06-environment-setup

Fail

Audited by Snyk on May 12, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). Three of the links (nodejs.org and the raw.githubusercontent.com nvm install script) point to well-known, trusted vendors/sources and are low-risk, but mise.jdx.dev (and its direct install.sh) is an untrusted third-party domain offering a direct shell installer — a high-risk pattern (avoid piping/running without auditing).

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 12, 2026, 09:42 PM
Issues
1