yahoo-finance
Fail
Audited by Snyk on Feb 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.90). These are direct .sh/.ps1 installer scripts served from a third‑party domain (astral.sh) and are intended to be piped to shell/PowerShell—an execution pattern commonly used to deliver malicious code unless the domain and project are verified trustworthy.
Audit Metadata