dotenv

Fail

Audited by Snyk on Aug 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). The URL is used as a remote shell installer (curl ... | sh) for a third‑party tool (dotenvx), which is a high-risk pattern because it fetches and executes an arbitrary shell script from an external domain rather than using vetted package managers.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 8, 2026, 04:16 AM
Issues
1
Security Audit — snyk — dotenv