hiclaw-migrate

Fail

Audited by Snyk on Apr 6, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). They are direct-download links to a shell and PowerShell installer on a domain that is not a widely-audited vendor site—running remote .sh/.ps1 from an unverified source is high risk because such scripts can execute arbitrary/malicious commands or install persistent backdoors, so the files should be inspected, verified (signature/maintainer), and executed only in an isolated environment.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 6, 2026, 08:12 AM
Issues
1