compose-preview-design-board

Fail

Audited by Snyk on Jul 24, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). The package invites running curl|bash on a raw .sh hosted in a personal GitHub repo (yschimke) and points to personal GitHub repositories — a common vector for delivering arbitrary, potentially malicious shell code, so this is high risk.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 24, 2026, 01:26 PM
Issues
1
Security Audit — snyk — compose-preview-design-board