brand-logo-kit
Fail
Audited by Snyk on Jul 8, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). One URL is a direct shell installer script (https://astral.sh/uv/install.sh) — a high-risk pattern (download-and-run .sh) that can be used to deliver malware; the other URLs (skills.sh, astral.sh/uv, openrouter.ai API) are API/site endpoints and are not direct executables.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata