user-stories
Fail
Audited by Snyk on Jul 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The TomeVault links point to a third‑party distribution/installation service (claim and install endpoints) that can be used to deliver or prompt installation of software from an untrusted source, which is a higher-risk distribution channel compared with official vendor/CDN/GitHub sources.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata