gang

Fail

Audited by Snyk on Apr 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The URL points to a GitHub repository owned by an unvetted/unknown user and the skill instructs installing directly from the git URL (pipx install git+...), which can execute arbitrary code on the system and thus is suspicious unless the repo's provenance, activity, and code are verified.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 22, 2026, 08:05 AM
Issues
1