gemini3pro

Fail

Audited by Snyk on Feb 18, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). This is suspicious because it is a direct link to a remote shell installer (install.sh) on an unfamiliar domain and the skill explicitly instructs piping it to sh (curl ... | sh), which executes unreviewed remote code—a common malware distribution vector.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 18, 2026, 10:46 PM