autoreview
Fail
Audited by Snyk on Aug 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). Several inputs embed credentials in the URL authority (user:pass@host, username@host, or username-like authorities) and one points at a cloud metadata credentials endpoint (http://169.254.170.2/credentials), both of which are high-risk for credential leakage, SSRF abuse, or illicit credential retrieval.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata