higgsfield
Fail
Audited by Snyk on Aug 23, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). This repository instructs users to run a remote install script via curl|sh (https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh), which is a high-risk pattern because it executes a remote shell script without local inspection; the other links are to GitHub, the higgsfield.ai domain, shields, and an official DejaVu release which are low-risk.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata