bug

Fail

Audited by Snyk on Jun 20, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). The URL is a GitHub user profile (a legitimate host) but points to an individual/unknown account ("shipshitdev") that could host untrusted releases or executables—there's no direct download but obtaining binaries from unfamiliar GitHub accounts is higher risk.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 20, 2026, 01:13 PM
Issues
1
Security Audit — snyk — bug