setup-pinnacle-remote-tool

Fail

Audited by Snyk on Oct 11, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill downloads requirements and a Python wheel from a third-party domain (connect.aiscientist.tools) rather than an official registry or verified repository.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill fetches setup scripts and requirements via HTTPS from both an official Harvard repository and an arbitrary external domain during its documented installation instructions, presenting an unverifiable external runtime dependency.

Issues (2)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 11, 2026, 05:27 PM
Issues
2