hiclaw-migrate
Fail
Audited by Snyk on Apr 6, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). They are direct-download links to a shell and PowerShell installer on a domain that is not a widely-audited vendor site—running remote .sh/.ps1 from an unverified source is high risk because such scripts can execute arbitrary/malicious commands or install persistent backdoors, so the files should be inspected, verified (signature/maintainer), and executed only in an isolated environment.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata