writing-dockerfiles
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The two github URLs that embed credentials (https://${TOKEN}@github.com/... and https://${GITHUB_TOKEN}@github.com/...) are high-risk because embedding tokens in clone URLs can leak secrets and enable fetching private/malicious code (and thus distribution of malware) from otherwise legitimate GitHub hosts, while http://localhost:8080/health is benign (a local health-check endpoint) and not a download source.
Audit Metadata