gpc-setup

Fail

Audited by Snyk on May 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The set includes a direct raw GitHub install script (https://raw.githubusercontent.com/.../install.sh) that the skill instructs users to curl | bash—which is a high-risk pattern for malware distribution from an untrusted/third‑party repo—even though the other links are official Google docs and a harmless example proxy URL.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 21, 2026, 09:57 AM
Issues
1
Security Audit — snyk — gpc-setup