slot-deploy
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). The api.cartridge.gg URL is a benign-looking API endpoint, but the provided installation step uses curl -L https://slot.cartridge.sh | bash, which downloads and directly executes a shell script from a third‑party domain—a high‑risk pattern for malware distribution unless the domain and script are independently verified.
Audit Metadata