prompt-engineering
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These URLs point to an unverified domain that serves a remote installer (the pattern curl ... | sh to cli.inference.sh), which downloads and executes shell/binary code from an untrusted source — a common high-risk vector for malware distribution.
Audit Metadata