grepai-quickstart
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.85). These URLs include raw GitHub .sh/.ps1 installer links from a single, not-widely-known GitHub user (yoanbernabeu) plus an external install script that the skill instructs you to pipe directly into sh/iex — a high-risk pattern because executing remote scripts from unverified sources can distribute malware (the localhost API call is benign).
Audit Metadata