uv

Fail

Audited by Snyk on Feb 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). These are direct links to installer scripts (install.sh, install.ps1) hosted on a non-mainstream domain (astral.sh); while they may be the project's official installers, executing remote shell/PowerShell scripts without verifying the domain and inspecting the content is risky and can be used to distribute malware.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 27, 2026, 03:58 PM