video-audit

Fail

Audited by Snyk on Oct 10, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill instructs users to download and execute software from https://treg.to/install.sh, which is part of the documented setup for the required treg CLI tool.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing a remote installation script from https://treg.to/install.sh via curl during runtime setup, establishing an external dependency with weak/unknown provenance.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 10, 2026, 04:40 PM
Issues
2