higgsfield-stack
Fail
Audited by Snyk on Jul 10, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The raw GitHub URL (raw.githubusercontent.com/.../install.sh) is a direct install script intended to be run via curl | sh (executes arbitrary code) which is a high-risk distribution vector; the other URLs point to an official domain or GitHub repos and are lower risk.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata