subagent-driven-prototyping

Fail

Audited by Snyk on Aug 9, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The URL points to a GitHub repository under an unfamiliar username ("obra") referenced as a required plugin (and it differs from the "orba/superpowers" name used elsewhere), which is a potential typosquat/unknown-source risk for distributing binaries or malicious code.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 9, 2026, 12:56 PM
Issues
1
Security Audit — snyk — subagent-driven-prototyping