setup-scanvi-remote-tool
Fail
Audited by Snyk on Oct 11, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (medium risk: 0.30). The skill instructs downloading a wheel package from
https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl, which is an unknown third-party domain hosting proprietary or unverified software with a pinned SHA-256 hash.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill installs a remote wheel from
https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl, which constitutes an unverifiable external runtime dependency with unknown publisher provenance.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata