zero-trust
Fail
Audited by Snyk on Jul 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The GitHub links look like normal repository/documentation, but the TomeVault URLs (root, claim, and install) point to a third‑party distribution/installation site referenced in the files (including an explicit "install" relay), which is a higher‑risk channel for distributing executables or installers outside official vendor channels.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata