split-drive-coach
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's install script (scripts/install-epm.cmd) downloads and then executes a remote installer at URLs like "https://d1.easeus.com/epm/free/epm_free_ob.exe?source=skills&dest=%DEST_ARG%" (with d1/d2/d3 mirrors), so the fetched content is executed at runtime and is a required dependency for the skill.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing and running partition-management software that modifies disk partitions and Program Files, and it tells the user/agent to run commands as Administrator/approve UAC, which requests privilege escalation and enables destructive system-level changes.
Audit Metadata