setup-celltypist-remote-tool

Fail

Audited by Snyk on Oct 11, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill instructs downloading a wheel package from https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl, which lacks credible association with a known benign upstream project.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs the installation of a wheel file (tuplatform_connect-0.3.0-py3-none-any.whl) from an arbitrary domain (https://connect.aiscientist.tools/downloads/) with unknown first-party provenance, constituting a high-risk unverifiable runtime external dependency.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 11, 2026, 05:26 PM
Issues
2