autoreview

Fail

Audited by Snyk on Aug 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). Several inputs embed credentials in the URL authority (user:pass@host, username@host, or username-like authorities) and one points at a cloud metadata credentials endpoint (http://169.254.170.2/credentials), both of which are high-risk for credential leakage, SSRF abuse, or illicit credential retrieval.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 13, 2026, 10:41 AM
Issues
1
Security Audit — snyk — autoreview