verasic-bugbot

Fail

Audited by Snyk on Jul 25, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). The raw.githubusercontent.com link points to a setup.sh script that the README instructs users to curl and pipe to bash (execute remotely fetched shell code) from a personal GitHub repo — a high-risk pattern for distributing malicious executables or arbitrary commands.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 25, 2026, 12:47 PM
Issues
1
Security Audit — snyk — verasic-bugbot