threat-modelling

Fail

Audited by Snyk on Jul 9, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These TomeVault links point to an unfamiliar third‑party distribution site (including an /install page for a Relay/installer) that is not an established vendor or package manager and could be used to distribute binaries, matching high-risk indicators for untrusted download sources.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 9, 2026, 01:21 AM
Issues
1
Security Audit — snyk — threat-modelling