NYC

dcg

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). The links point to a personal GitHub repository and a direct raw install.sh that the skill instructs users to pipe to bash; running an unreviewed shell script from an unvetted/low-profile account is a high-risk distribution vector for malware.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 15, 2026, 08:51 PM