prompt-engineering
Fail
Audited by Snyk on Feb 18, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These URLs belong to an unknown/unverified domain that instructs users to curl a subdomain script and pipe it to sh (remote-execution of an untrusted shell script), and includes direct file hosting that could be used to deliver malicious payloads.
Audit Metadata