@tank/llm-observability

Fail

Audited by Snyk on May 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). This is a GitHub repository under an unfamiliar username (tankpkg); while GitHub is a common legitimate host and the provided files look like docs/package metadata (no direct .exe/.msi links), unknown/smaller repos can host malicious code or binaries and lack community vetting, so treat it as moderately suspicious until provenance and release artifacts are verified.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 31, 2026, 11:05 PM
Issues
1
Security Audit — snyk — @tank/llm-observability