still-reading
Fail
Audited by Snyk on Feb 25, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). Yes — these URLs point to user-hosted apps on Vercel/here.now and explicitly instruct piping remote install.sh scripts into a shell and loading content from dynamic personal subdomains, which are untrusted sources and a high-risk method for distributing arbitrary malware.
Audit Metadata