python-env-manager

Fail

Audited by Snyk on May 28, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These are direct shell/PowerShell installer scripts (install.sh / install.ps1) hosted at pixi.sh — likely the official pixi bootstrap URLs mentioned in the skill, but remote scripts piped to sh/iex are inherently risky unless you verify the domain and inspect the script or its signature.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 28, 2026, 08:58 PM
Issues
1
Security Audit — snyk — python-env-manager