NYC

ubs

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). These are raw.githubusercontent.com links to an executable and an install.sh in an unverified/unknown GitHub repo and the skill explicitly instructs piping the install script to bash—a classic high-risk pattern that can deliver arbitrary/malicious code.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 15, 2026, 08:45 PM