setup

Fail

Audited by Snyk on May 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The URL points to a direct shell script (install.sh) served from an external domain — executing a remote .sh via curl | bash is inherently risky unless you have independently verified the domain and script contents (the presence of a pipx fallback suggests it's likely a legitimate vendor, but the direct exeution of a remote script still represents a high-risk pattern).

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 8, 2026, 01:11 AM
Issues
1