sf-diagram-nanobananapro

Fail

Audited by Snyk on Mar 14, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). Mixed: aistudio.google.com is an official Google site (low risk), but astral.sh/uv/install.sh is a direct shell installer hosted on a third‑party domain—downloading or piping arbitrary .sh files to sh from unvetted domains is high risk unless you verify the source and inspect/check signatures.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Mar 14, 2026, 03:25 PM
Issues
1