higgsfield

Fail

Audited by Snyk on Aug 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). This repository instructs users to run a remote install script via curl|sh (https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh), which is a high-risk pattern because it executes a remote shell script without local inspection; the other links are to GitHub, the higgsfield.ai domain, shields, and an official DejaVu release which are low-risk.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 23, 2026, 02:10 AM
Issues
1
Security Audit — snyk — higgsfield