liucixin-perspective
Fail
Audited by Snyk on Jun 29, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). This URL points to a third‑party GitHub repository (alchaincyf/nuwa-skill) which is not an official vendor source; while GitHub itself is common for code, unknown accounts and repos can host malicious code or binaries/release artifacts and should be treated with caution (avoid running downloaded executables or install scripts without verification).
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata